mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-08 04:16:03 -05:00
[GH-ISSUE #14415] issue: SSO with 0.6.11 fails #32773
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/open-webui#32773
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @pierrelouisbescond on GitHub (May 27, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/14415
Check Existing Issues
Installation Method
Git Clone
Open WebUI Version
0.6.11
Ollama Version (if applicable)
N/A
Operating System
Ubuntu 22.04
Browser (if applicable)
Edge/Chrome
Confirmation
README.md.Expected Behavior
Connection through SSO (Microsoft) should work as for the previous versions (0.6.9, 0.6.10).
Actual Behavior
During the authentication process, we end up with a "Hmmm… can't reach this page / localhost refused to connect."
Steps to Reproduce
I just clicked on the "Continue with Microsoft" button:
The issue was reproduced with different PCs / Network.
Connection through login/pwd works perfectly.
Logs & Screenshots
2025-05-27T16:11:21.548202050Z 2025-05-27 16:11:21.548 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: POST https://login.microsoftonline.com/XXXXXXXXXXXXXXXXXXXXXXXX/oauth2/v2.0/token "HTTP/1.1 200 OK" - {}
2025-05-27T16:11:21.555230374Z 2025-05-27 16:11:21.555 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 91.161.14.176:0 - "GET /oauth/microsoft/callback?code=1.AXkA0voiWEnLu[...]8uKzlrcw&state=VLBVTEB[...]vM61&session_state=005071d[...]ce83b3bf026a HTTP/1.1" 307 - {}
Additional Information
Available to conduct further tests.
I've read that some improvements were made regarding the token expiration and UI silently failing. It might be linked to it.
@rgaricano commented on GitHub (May 27, 2025):
did you try cleaning cookie?
@tylermiranda commented on GitHub (May 27, 2025):
same issue using Cloudflare SSO
@pierrelouisbescond commented on GitHub (May 27, 2025):
Yes, tested with cookies cleaned or private mode, same issue.
@Ithanil commented on GitHub (May 27, 2025):
AFAIK now WEBUI_URL needs to be set correctly (either initially via ENV or via UI, because it's a PersistentConfig).
@beastech commented on GitHub (May 27, 2025):
Roll back to 0.6.10, go under admin\settings and scroll down to WebUI URL and manually enter it. Save it, then update to 0.6.11 and see if that resolves it for you.
@pierrelouisbescond commented on GitHub (May 27, 2025):
@Ithanil @beastech Setting the WEBUI_URL through env variable up did not solve the issue, but setting it up through the UI did.
PS: I do not need to roll-back to 6.10 as I also have a user/pwd access
@tylermiranda commented on GitHub (May 27, 2025):
yeah my web_url has been set correctly from the get go and I have this issue
@Ithanil commented on GitHub (May 27, 2025):
Hmm that's strange. Then all I can say it apparently doesn't affect all OIDC setups. :-(
Still would suspect
d4c3cfbaba(which was added instead of https://github.com/open-webui/open-webui/pull/14053)@Zyfax commented on GitHub (May 27, 2025):
I have testet in latest main and dev with Google OAuth and self-hosted KeyCloak and both of them are working fine.
But.. WebUI URL has to be correct as @Ithanil mention.
Double check under Admin Panel > Settings > General > WebUI URL is the same url used to access OI.
If it does not match, the redirect will fail.