I have searched the existing issues and discussions.
Problem Description
I have recently deployed this application at my organization, and to me it appears that API keys that users generate do not have an expiration date.
I think it may be a good practice to introduce a method of enforcing an expiration of these keys.
Desired Solution you'd like
I would like to, as an admin, enforce "user" level accounts within a group to have a specific length of API key expiration/rotation.
Alternatives Considered
No response
Additional Context
No response
Originally created by @sircharlesxx on GitHub (Jul 16, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/15800
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
### Problem Description
I have recently deployed this application at my organization, and to me it appears that API keys that users generate do not have an expiration date.
I think it may be a good practice to introduce a method of enforcing an expiration of these keys.
### Desired Solution you'd like
I would like to, as an admin, enforce "user" level accounts within a group to have a specific length of API key expiration/rotation.
### Alternatives Considered
_No response_
### Additional Context
_No response_
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @sircharlesxx on GitHub (Jul 16, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/15800
Check Existing Issues
Problem Description
I have recently deployed this application at my organization, and to me it appears that API keys that users generate do not have an expiration date.
I think it may be a good practice to introduce a method of enforcing an expiration of these keys.
Desired Solution you'd like
I would like to, as an admin, enforce "user" level accounts within a group to have a specific length of API key expiration/rotation.
Alternatives Considered
No response
Additional Context
No response