mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-06 19:08:59 -05:00
[GH-ISSUE #15239] feat: Enable Oauth Popup flow #33035
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Ardakilic on GitHub (Jun 23, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/15239
Check Existing Issues
Problem Description
We are running OpenWebUI in an iframe on a bigger web app, as an internal tool. We'd like to use Google oAuth signup flow, however, we cannot proceed authentication if the page is inside an iframe, due to Google's security policy we get HTTP 403. Because, oauth flow redirects the current frame that the app is running.
Desired Solution you'd like
As far as we know, if oauth flow is executed through a popup, we believe we can overcome this problem. We already have some tools running inside an iframe like this.
Alternatives Considered
Altering files would be a hassle, but if that's only way we can also do it for the time being.
Additional Context
None, thanks in advance!