I did some investigation and found that it is because we are using duplicate key id in JWKS endpoint, and authlib==1.6.1 has a bug related to JWKS fetching.
Desired Solution you'd like
Upgrade authlib to 1.6.2 fixes this bug.
Alternatives Considered
No response
Additional Context
No response
Originally created by @athenacykes on GitHub (Sep 9, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/17283
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
### Problem Description
I have previously opened this issue: https://github.com/open-webui/open-webui/discussions/17114
I did some investigation and found that it is because we are using duplicate key id in JWKS endpoint, and authlib==1.6.1 has a bug related to JWKS fetching.
### Desired Solution you'd like
Upgrade authlib to 1.6.2 fixes this bug.
### Alternatives Considered
_No response_
### Additional Context
_No response_
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @athenacykes on GitHub (Sep 9, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/17283
Check Existing Issues
Problem Description
I have previously opened this issue: https://github.com/open-webui/open-webui/discussions/17114
I did some investigation and found that it is because we are using duplicate key id in JWKS endpoint, and authlib==1.6.1 has a bug related to JWKS fetching.
Desired Solution you'd like
Upgrade authlib to 1.6.2 fixes this bug.
Alternatives Considered
No response
Additional Context
No response
@tjbck commented on GitHub (Sep 9, 2025):
Addressed in dev.