mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-06 02:48:13 -05:00
[GH-ISSUE #13090] issue: WEBUI_AUTH_TRUSTED_EMAIL_HEADER ignored #16805
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/open-webui#16805
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @qhaas on GitHub (Apr 20, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/13090
Check Existing Issues
Installation Method
Docker
Open WebUI Version
v0.6.5-ollama
Ollama Version (if applicable)
No response
Operating System
RHEL 9
Browser (if applicable)
No response
Confirmation
README.md.Expected Behavior
Per trusted header configuration, one should be able to set the
WEBUI_AUTH_TRUSTED_EMAIL_HEADERenvironment variable on a new open-webui deployment and any webapi call made with the header info set should be sufficient for authentication.Actual Behavior
A list of all models returned with this webapi call
Steps to Reproduce
docker run --rm -d --name open-webui -p 127.0.0.1:8080:8080 -e WEBUI_AUTH_TRUSTED_EMAIL_HEADER='X-User-Email' ghcr.io/open-webui/open-webui:v0.6.5-ollamacurl -s -H "X-User-Email: admin@localhost" http://127.0.0.1:8080/api/modelsLogs & Screenshots
$ docker run --rm -d --name open-webui -p 127.0.0.1:8080:8080 -e WEBUI_AUTH_TRUSTED_EMAIL_HEADER='X-User-Email' ghcr.io/open-webui/open-webui:v0.6.5-ollama
$ curl -s -H "X-User-Email: admin@localhost" http://127.0.0.1:8080/api/models | jq
{
"detail": "Not authenticated"
}
Additional Information
open-webui-logs.txt