mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-06 10:58:17 -05:00
[GH-ISSUE #4745] FR: auto approve registrations for emails on specific domain #13718
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/open-webui#13718
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @mootfrost on GitHub (Aug 20, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/4745
Is your feature request related to a problem? Please describe.
It is really annoying to approve many users from one organization manually. The only way to do this now is using a webhook.
Describe the solution you'd like
Setting in UI to automatically approve new signups made using oauth application with email ending with a specific domain.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.
@justinh-rahb commented on GitHub (Aug 20, 2024):
Presently, emails aren't validated in any way, so while even if you could whitelist
example.comyou could register literallyanything@example.comand it would auto-approve it immediately. This probably is not desired.@mootfrost commented on GitHub (Aug 20, 2024):
Only when authenticating with google or any other oauth provider. Like in LibreChat
@harrisonhxy commented on GitHub (Nov 20, 2024):
Is your idea to support automatic email registration for specific domains only? For example: for
@gmial.comusers, the registration can be automatically approved and completed.Besides, I would like to ask, is there a verification aspect to registering using email? For example, sending a verification code to the user's gmail and then verifying it with the assistance of the code and completing the registration.
@DmitriyAlergant commented on GitHub (Nov 28, 2024):
This already works. See environment variable options
It may require some trial&error regarding the OAUTH_ROLES_CLAIM option, but then it can be made to obtaining the 'User' role from OAuth claim and assigning it automatically, so you won't need to confirm. We made it work for Microsoft Entra ID (easily) and for Keycloak (required some trial and error)
@meowth1006 commented on GitHub (Jan 26, 2025):
Could you please tell me how you solved this problem using a webhook? Thanks.
@mootfrost commented on GitHub (Jan 26, 2025):
@meowth1006 i used this as a temporary solution https://github.com/mootfrost/webui-approver
@stephansann commented on GitHub (Feb 20, 2025):
+1 for an auto-approval setting.
I set up Open WebUI with Keycloak as OpenID Provider and
ENABLE_OAUTH_SIGNUP=true
The via Keycloak logged in user will be created, but in state "pending". This is very frustrating for a new user that wants to try out the system.
And a lot of work for the admin, even though he wants to activate all users of the Keycloak realm anyhow.
@TryAnixx commented on GitHub (Jun 23, 2025):
how did you implement this? where is this endpoint documented on openwebui?
@meowth1006 commented on GitHub (Jun 24, 2025):
@TryAnixx
You need to set the environment variable to dev to see the API documentation.
https://github.com/open-webui/open-webui/issues/4745#issuecomment-2614304588
mootfrost provides an example of an automatic approval interface using fastapi, which needs to be deployed by yourself