[GH-ISSUE #19361] issue: Unicode rendering issues when using HTTP header-based authentication #18848

Closed
opened 2026-04-20 01:04:58 -05:00 by GiteaMirror · 2 comments
Owner

Originally created by @tlhr on GitHub (Nov 21, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/19361

Check Existing Issues

  • I have searched for any existing and/or related issues.
  • I have searched for any existing and/or related discussions.
  • I have also searched in the CLOSED issues AND CLOSED discussions and found no related items (your issue might already be addressed on the development branch!).
  • I am using the latest version of Open WebUI.

Installation Method

Docker

Open WebUI Version

v0.6.36

Ollama Version (if applicable)

No response

Operating System

macOS Sequoia 15.7

Browser (if applicable)

Firefox 146 Nightly, Safari 26 (20622.1.22.118.2)

Confirmation

  • I have read and followed all instructions in README.md.
  • I am using the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.
  • I have provided every relevant configuration, setting, and environment variable used in my setup.
  • I have clearly listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc).
  • I have documented step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation. My steps:
  • Start with the initial platform/version/OS and dependencies used,
  • Specify exact install/launch/configure commands,
  • List URLs visited, user input (incl. example values/emails/passwords if needed),
  • Describe all options and toggles enabled or changed,
  • Include any files or environmental changes,
  • Identify the expected and actual result at each stage,
  • Ensure any reasonably skilled user can follow and hit the same issue.

Expected Behavior

When using HTTP header authentication, reading the display name from $WEBUI_AUTH_TRUSTED_NAME_HEADER should not garble Unicode input in the interface, such as names with umlaut characters (e.g. Löhr).

Actual Behavior

Names with non-ascii characters are garbled and appear like this, throughout the UI:

Image

Steps to Reproduce

Run Open-WebUI with header based authentication by setting the following environment variables:

WEBUI_AUTH_TRUSTED_EMAIL_HEADER=X-User-Email
WEBUI_AUTH_TRUSTED_NAME_HEADER=X-User-Name

Make a request with X-User-Name set to a name with unicode characters. The users name in the UI (sidebar and user list) will be garbled.

Logs & Screenshots

Here's a snippet of the logs from the docker container, I can see no issues logged (I have redacted the email and IP addresses), the browser logs also show nothing:

2025-11-21 11:16:00.546 | INFO     | open_webui.models.auths:insert_new_auth:103 - insert_new_auth
2025-11-21 11:16:00.584 | INFO     | open_webui.models.auths:authenticate_user_by_email:158 - authenticate_user_by_email: ***@***.org
2025-11-21 11:16:00.591 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "POST /api/v1/auths/signin HTTP/1.1" 200
2025-11-21 11:16:00.591 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /static/favicon.png HTTP/1.1" 200
2025-11-21 11:16:00.592 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/version HTTP/1.1" 200
2025-11-21 11:16:00.596 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /assets/fonts/Archivo-Variable.ttf HTTP/1.1" 200
2025-11-21 11:16:00.600 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /assets/fonts/Inter-Variable.ttf HTTP/1.1" 200

2025-11-21 11:16:00.636 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/config HTTP/1.1" 200
2025-11-21 11:16:00.887 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /user.png HTTP/1.1" 200
2025-11-21 11:16:00.890 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/v1/users/user/settings HTTP/1.1" 200
2025-11-21 11:16:00.891 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/v1/configs/banners HTTP/1.1" 200
2025-11-21 11:16:00.908 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/v1/tools/ HTTP/1.1" 200
2025-11-21 11:16:00.933 | INFO     | open_webui.routers.openai:get_all_models:490 - get_all_models()

Additional Information

Changing the name in the UI after logging in for the first time works, and the change is permanent, so I'd assume there's something happening in the header parsing. #13201 is potentially related.

Originally created by @tlhr on GitHub (Nov 21, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/19361 ### Check Existing Issues - [x] I have searched for any existing and/or related issues. - [x] I have searched for any existing and/or related discussions. - [x] I have also searched in the CLOSED issues AND CLOSED discussions and found no related items (your issue might already be addressed on the development branch!). - [x] I am using the latest version of Open WebUI. ### Installation Method Docker ### Open WebUI Version v0.6.36 ### Ollama Version (if applicable) _No response_ ### Operating System macOS Sequoia 15.7 ### Browser (if applicable) Firefox 146 Nightly, Safari 26 (20622.1.22.118.2) ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have **provided every relevant configuration, setting, and environment variable used in my setup.** - [x] I have clearly **listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup** (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc). - [x] I have documented **step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation**. My steps: - Start with the initial platform/version/OS and dependencies used, - Specify exact install/launch/configure commands, - List URLs visited, user input (incl. example values/emails/passwords if needed), - Describe all options and toggles enabled or changed, - Include any files or environmental changes, - Identify the expected and actual result at each stage, - Ensure any reasonably skilled user can follow and hit the same issue. ### Expected Behavior When using HTTP header authentication, reading the display name from `$WEBUI_AUTH_TRUSTED_NAME_HEADER` should not garble Unicode input in the interface, such as names with umlaut characters (e.g. `Löhr`). ### Actual Behavior Names with non-ascii characters are garbled and appear like this, throughout the UI: <img width="197" height="60" alt="Image" src="https://github.com/user-attachments/assets/20af5372-6176-42e0-ac70-b9aa53bfeb94" /> ### Steps to Reproduce Run Open-WebUI with header based authentication by setting the following environment variables: ```bash WEBUI_AUTH_TRUSTED_EMAIL_HEADER=X-User-Email WEBUI_AUTH_TRUSTED_NAME_HEADER=X-User-Name ``` Make a request with `X-User-Name` set to a name with unicode characters. The users name in the UI (sidebar and user list) will be garbled. ### Logs & Screenshots Here's a snippet of the logs from the docker container, I can see no issues logged (I have redacted the email and IP addresses), the browser logs also show nothing: ``` 2025-11-21 11:16:00.546 | INFO | open_webui.models.auths:insert_new_auth:103 - insert_new_auth 2025-11-21 11:16:00.584 | INFO | open_webui.models.auths:authenticate_user_by_email:158 - authenticate_user_by_email: ***@***.org 2025-11-21 11:16:00.591 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "POST /api/v1/auths/signin HTTP/1.1" 200 2025-11-21 11:16:00.591 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /static/favicon.png HTTP/1.1" 200 2025-11-21 11:16:00.592 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/version HTTP/1.1" 200 2025-11-21 11:16:00.596 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /assets/fonts/Archivo-Variable.ttf HTTP/1.1" 200 2025-11-21 11:16:00.600 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /assets/fonts/Inter-Variable.ttf HTTP/1.1" 200 2025-11-21 11:16:00.636 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/config HTTP/1.1" 200 2025-11-21 11:16:00.887 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /user.png HTTP/1.1" 200 2025-11-21 11:16:00.890 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/v1/users/user/settings HTTP/1.1" 200 2025-11-21 11:16:00.891 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/v1/configs/banners HTTP/1.1" 200 2025-11-21 11:16:00.908 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - ***:0 - "GET /api/v1/tools/ HTTP/1.1" 200 2025-11-21 11:16:00.933 | INFO | open_webui.routers.openai:get_all_models:490 - get_all_models() ``` ### Additional Information Changing the name in the UI after logging in for the first time works, and the change is permanent, so I'd assume there's something happening in the header parsing. [#13201](https://github.com/open-webui/open-webui/issues/13201) is potentially related.
GiteaMirror added the bug label 2026-04-20 01:04:58 -05:00
Author
Owner

@tlhr commented on GitHub (Nov 21, 2025):

Seems like there was a PR for this issue (#18646)

<!-- gh-comment-id:3562599021 --> @tlhr commented on GitHub (Nov 21, 2025): Seems like there was a PR for this issue (#18646)
Author
Owner

@tjbck commented on GitHub (Nov 21, 2025):

b4c4d9baf5

<!-- gh-comment-id:3564572673 --> @tjbck commented on GitHub (Nov 21, 2025): b4c4d9baf5de8eaf617ab7772e0b62c7b409786e
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#18848