Disable "Enable new sign ups" does not work #2074

Closed
opened 2025-11-11 14:59:51 -06:00 by GiteaMirror · 8 comments
Owner

Originally created by @stevenbaert on GitHub (Sep 12, 2024).

Bug Report

Installation Method

Docker

Environment

0.3.21

  • Operating System: Linux (Synology)
  • **Browser (if applicable):Edge Chromium

Confirmation:

  • [ x] I have read and followed all the instructions provided in the README.md.
  • [x ] I am on the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.
  • I have provided the exact steps to reproduce the bug in the "Steps to Reproduce" section below.

Expected Behavior:

New sign ups should be rejected

Actual Behavior:

Sign ups are allowed and totally unknown users show up as pending member into my list of users.

Description

Bug Summary:
See actual behavior

Reproduction Details

Steps to Reproduce:
Not relevant, users sign up though they should not be allowed to.

Originally created by @stevenbaert on GitHub (Sep 12, 2024). # Bug Report ## Installation Method Docker ## Environment 0.3.21 - **Operating System:** Linux (Synology) - **Browser (if applicable):Edge Chromium **Confirmation:** - [ x] I have read and followed all the instructions provided in the README.md. - [x ] I am on the latest version of both Open WebUI and Ollama. - [ ] I have included the browser console logs. - [ ] I have included the Docker container logs. - [ ] I have provided the exact steps to reproduce the bug in the "Steps to Reproduce" section below. ## Expected Behavior: New sign ups should be rejected ## Actual Behavior: Sign ups are allowed and totally unknown users show up as *pending* member into my list of users. ## Description **Bug Summary:** See actual behavior ## Reproduction Details **Steps to Reproduce:** Not relevant, users sign up though they should not be allowed to.
Author
Owner

@silentoplayz commented on GitHub (Sep 13, 2024):

Working fine for me on the latest dev.
image

@silentoplayz commented on GitHub (Sep 13, 2024): Working fine for me on the latest dev. ![image](https://github.com/user-attachments/assets/261257e4-e925-4f78-9a92-ccf59a3a9aea)
Author
Owner

@stevenbaert commented on GitHub (Sep 13, 2024):

I’m not sure I fully understand your point. I exclusively use OAuth for sign-ins, as it’s the most secure method, and passwords are vulnerable to brute-force attacks. Through OAuth, any ramdom user can log in via Google and then they still appear in a ‘pending’ state. I’m using the latest version of Open-Webui, so the issue isn’t resolved for me. My goal is to prevent random users from signing up.

@stevenbaert commented on GitHub (Sep 13, 2024): I’m not sure I fully understand your point. I exclusively use OAuth for sign-ins, as it’s the most secure method, and passwords are vulnerable to brute-force attacks. Through OAuth, any ramdom user can log in via Google and then they still appear in a ‘pending’ state. I’m using the latest version of Open-Webui, so the issue isn’t resolved for me. My goal is to prevent random users from signing up.
Author
Owner

@silentoplayz commented on GitHub (Sep 13, 2024):

Have you set ENABLE_SIGNUP to false as an environment variable for your Open WebUI instance or disabled new sign ups within the GUI?

@silentoplayz commented on GitHub (Sep 13, 2024): Have you set `ENABLE_SIGNUP` to `false` as an environment variable for your Open WebUI instance or disabled new sign ups within the GUI?
Author
Owner

@stevenbaert commented on GitHub (Sep 13, 2024):

Only within the GUI.

@stevenbaert commented on GitHub (Sep 13, 2024): Only within the GUI.
Author
Owner

@stevenbaert commented on GitHub (Sep 13, 2024):

Have now done it in gui and in variable container but no change. Any user can still login then it shows this user status pending.

@stevenbaert commented on GitHub (Sep 13, 2024): Have now done it in gui and in variable container but no change. Any user can still login then it shows this user status pending.
Author
Owner

@silentoplayz commented on GitHub (Sep 13, 2024):

If you have the OAUTH_MERGE_ACCOUNTS_BY_EMAIL environment variable set to true, this bypasses the env var/toggle in the UI to disable new sign ups, which is intended behavior.

@silentoplayz commented on GitHub (Sep 13, 2024): If you have the [OAUTH_MERGE_ACCOUNTS_BY_EMAIL](https://docs.openwebui.com/getting-started/env-configuration#oauth_merge_accounts_by_email) environment variable set to `true`, this bypasses the env var/toggle in the UI to disable new sign ups, which is intended behavior.
Author
Owner

@stevenbaert commented on GitHub (Sep 13, 2024):

Have now done it in gui and in variable container but no change. Any user can still login then it shows this user status pending.

Also merge is not enabled.

@stevenbaert commented on GitHub (Sep 13, 2024): Have now done it in gui and in variable container but no change. Any user can still login then it shows this user status pending. Also merge is not enabled.
Author
Owner

@tjbck commented on GitHub (Sep 14, 2024):

Should be fixed with the latest dev, test wanted here!

@tjbck commented on GitHub (Sep 14, 2024): Should be fixed with the latest dev, test wanted here!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#2074