[GH-ISSUE #14540] issue: Failed to logout IDP when sign out in Oidc #32825

New Issue

GiteaMirror · 2026-04-25T06:41:23-05:00

GiteaMirror commented

2026-04-25 06:41:23 -05:00

Originally created by @Bouby308 on GitHub (May 31, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/14540

Check Existing Issues

I have searched the existing issues and discussions.
I am using the latest version of Open WebUI.

Installation Method

Docker

Open WebUI Version

0.6.13

Ollama Version (if applicable)

No response

Operating System

Ubuntu

Browser (if applicable)

No response

Confirmation

I have read and followed all instructions in README.md.
I am using the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have provided every relevant configuration, setting, and environment variable used in my setup.
I have clearly listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc).
I have documented step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation. My steps:
Start with the initial platform/version/OS and dependencies used,
Specify exact install/launch/configure commands,
List URLs visited, user input (incl. example values/emails/passwords if needed),
Describe all options and toggles enabled or changed,
Include any files or environmental changes,
Identify the expected and actual result at each stage,
Ensure any reasonably skilled user can follow and hit the same issue.

Expected Behavior

When I sign out, the IDP should also be signout.

Actual Behavior

The user is redirected to login page without signing out of the IDP.

Steps to Reproduce

Install the latest openwebui version in docker.
Set up Oidc with keycloak.
Log in via sso and sign out.
Sign in again and no credentials will be required.

Logs & Screenshots

No error was seen in browser and docker logs

Additional Information

The issue does not happen in v0.6.9. It seems that the sign out function in the api has some bugs with refac/fix: signout redirect flow after v0.6.9.

The sign out function in the api does not return json if the request is successful.

export const userSignOut = async () => {
	let error = null;

	const res = await fetch(`${WEBUI_API_BASE_URL}/auths/signout`, {
		method: 'GET',
		headers: {
			'Content-Type': 'application/json'
		},
		credentials: 'include'
	})
		.then(async (res) => {
			if (!res.ok) throw await res.json();
			return res;
		})
		.catch((err) => {
			console.error(err);
			error = err.detail;
			return null;
		});

	if (error) {
		throw error;
	}
	return res;
};

Therefore, location.href = res?.redirect_url ?? '/auth' does not return the IDP logout url.

I am not a coding expert. Please correct me if I am wrong.

Originally created by @Bouby308 on GitHub (May 31, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/14540 ### Check Existing Issues - [x] I have searched the existing issues and discussions. - [x] I am using the latest version of Open WebUI. ### Installation Method Docker ### Open WebUI Version 0.6.13 ### Ollama Version (if applicable) _No response_ ### Operating System Ubuntu ### Browser (if applicable) _No response_ ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have **provided every relevant configuration, setting, and environment variable used in my setup.** - [x] I have clearly **listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup** (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc). - [x] I have documented **step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation**. My steps: - Start with the initial platform/version/OS and dependencies used, - Specify exact install/launch/configure commands, - List URLs visited, user input (incl. example values/emails/passwords if needed), - Describe all options and toggles enabled or changed, - Include any files or environmental changes, - Identify the expected and actual result at each stage, - Ensure any reasonably skilled user can follow and hit the same issue. ### Expected Behavior When I sign out, the IDP should also be signout. ### Actual Behavior The user is redirected to login page without signing out of the IDP. ### Steps to Reproduce Install the latest openwebui version in docker. Set up Oidc with keycloak. Log in via sso and sign out. Sign in again and no credentials will be required. ### Logs & Screenshots No error was seen in browser and docker logs ### Additional Information The issue does not happen in v0.6.9. It seems that the sign out function in the api has some bugs with refac/fix: signout redirect flow after v0.6.9. The sign out function in the api does not return json if the request is successful. ``` export const userSignOut = async () => { let error = null; const res = await fetch(`${WEBUI_API_BASE_URL}/auths/signout`, { method: 'GET', headers: { 'Content-Type': 'application/json' }, credentials: 'include' }) .then(async (res) => { if (!res.ok) throw await res.json(); return res; }) .catch((err) => { console.error(err); error = err.detail; return null; }); if (error) { throw error; } return res; }; ``` Therefore, `location.href = res?.redirect_url ?? '/auth'` does not return the IDP logout url. I am not a coding expert. Please correct me if I am wrong.

GiteaMirror added the bug label 2026-04-25 06:41:23 -05:00

GiteaMirror closed this issue

2026-04-25 06:41:23 -05:00

GiteaMirror commented

2026-04-25 06:41:24 -05:00

@tjbck commented on GitHub (May 31, 2025):

PLEASE check for previous issues and discussions before creating one.

@tjbck commented on GitHub (May 31, 2025): PLEASE check for previous issues and discussions before creating one.

GiteaMirror commented

2026-04-25 06:41:25 -05:00

@Bouby308 commented on GitHub (May 31, 2025):

PLEASE check for previous issues and discussions before creating one.

I have read through the issues and discussions. The only similar issue is #7583 but I think the cause of the issue is different.
I believe that my issue is introduced by commit 7df6d7f as v0.6.9 works fine.

The backend returns a json response containing redirect_url but the frontend does not parse the response as json in the userSignOut function before calling res?.redirect_url.

@Bouby308 commented on GitHub (May 31, 2025): > PLEASE check for previous issues and discussions before creating one. I have read through the issues and discussions. The only similar issue is #7583 but I think the cause of the issue is different. I believe that my issue is introduced by commit 7df6d7f as v0.6.9 works fine. The backend returns a json response containing redirect_url but the frontend does not parse the response as json in the userSignOut function before calling res?.redirect_url.

GiteaMirror commented

2026-04-25 06:41:26 -05:00

@srinivassambari1 commented on GitHub (Jun 13, 2025):

We also face similar issue

@srinivassambari1 commented on GitHub (Jun 13, 2025): We also face similar issue ![Image](https://github.com/user-attachments/assets/2067667b-8183-40db-b359-605bb1e45ea7)

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#32825