I mentioned my problem previously within another OIDC config issue, but I still get an issue on my end when upgrading the helm chart above 6.19.0 (open-webui:0.6.13).
I'm quite sure about my OIDC config as it was working for more than a year, and rolling back fix the issue. I checked the doc for new or updated env vars but couldn't find any.
Now I've upgraded to 6.29.0 and I'm facing the same issue again, debugs logs are similar. What am I missing here?
Hey,
I have a similar issue, I end up in a login cycle when using SSO, here are the logs with debug enable:
open-webui 2025-07-12 18:39:52.843 | DEBUG | open_webui.utils.oauth:get_user_role:101 - Running OAUTH Role management - {}
open-webui 2025-07-12 18:39:52.843 | DEBUG | open_webui.utils.oauth:get_user_role:117 - Oauth Roles claim: realm_access.roles - {}
open-webui 2025-07-12 18:39:52.843 | DEBUG | open_webui.utils.oauth:get_user_role:118 - User roles from oauth: ['offline_access', 'admin', 'uma_authorization', 'default-roles-home', 'user'] - {}
open-webui 2025-07-12 18:39:52.844 | DEBUG | open_webui.utils.oauth:get_user_role:119 - Accepted user roles: ['user', 'admin'] - {}
open-webui 2025-07-12 18:39:52.844 | DEBUG | open_webui.utils.oauth:get_user_role:120 - Accepted admin roles: ['admin'] - {}
open-webui 2025-07-12 18:39:52.844 | DEBUG | open_webui.utils.oauth:get_user_role:128 - Assigned user the user role - {}
open-webui 2025-07-12 18:39:52.844 | DEBUG | open_webui.utils.oauth:get_user_role:134 - Assigned user the admin role - {}
I'm deploying it with the helm chart, my login related values :
Originally created by @2o1o0 on GitHub (Jul 26, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/16042
Hello,
I mentioned my problem previously within another OIDC config issue, but I still get an issue on my end when upgrading the helm chart above `6.19.0` (`open-webui:0.6.13`).
I'm quite sure about my OIDC config as it was working for more than a year, and rolling back fix the issue. I checked the doc for new or updated env vars but couldn't find any.
Now I've upgraded to `6.29.0` and I'm facing the same issue again, debugs logs are similar. What am I missing here?
> Hey,
>
> I have a similar issue, I end up in a login cycle when using SSO, here are the logs with debug enable:
>
> ```
> open-webui 2025-07-12 18:39:52.843 | DEBUG | open_webui.utils.oauth:get_user_role:101 - Running OAUTH Role management - {}
> open-webui 2025-07-12 18:39:52.843 | DEBUG | open_webui.utils.oauth:get_user_role:117 - Oauth Roles claim: realm_access.roles - {}
> open-webui 2025-07-12 18:39:52.843 | DEBUG | open_webui.utils.oauth:get_user_role:118 - User roles from oauth: ['offline_access', 'admin', 'uma_authorization', 'default-roles-home', 'user'] - {}
> open-webui 2025-07-12 18:39:52.844 | DEBUG | open_webui.utils.oauth:get_user_role:119 - Accepted user roles: ['user', 'admin'] - {}
> open-webui 2025-07-12 18:39:52.844 | DEBUG | open_webui.utils.oauth:get_user_role:120 - Accepted admin roles: ['admin'] - {}
> open-webui 2025-07-12 18:39:52.844 | DEBUG | open_webui.utils.oauth:get_user_role:128 - Assigned user the user role - {}
> open-webui 2025-07-12 18:39:52.844 | DEBUG | open_webui.utils.oauth:get_user_role:134 - Assigned user the admin role - {}
> ```
>
> I'm deploying it with the helm chart, my login related values :
>
> ```yaml
> - name: ENABLE_SIGNUP
> value: "false"
> - name: ENABLE_LOGIN_FORM
> value: "false"
> - name: ENABLE_OAUTH_ROLE_MANAGEMENT
> value: "true"
> - name: ENABLE_OAUTH_SIGNUP
> value: "true"
> - name: OAUTH_CLIENT_ID
> value: ollama
> - name: OAUTH_CLIENT_SECRET
> valueFrom:
> secretKeyRef:
> name: openwebui-secrets
> key: OAUTH_CLIENT_SECRET
> - name: OPENID_PROVIDER_URL
> value: https://my.domain/realms/home/.well-known/openid-configuration
> - name: OAUTH_PROVIDER_NAME
> value: Keycloak
> - name: OAUTH_ROLES_CLAIM
> value: "realm_access.roles"
> ```
>
> Rolling back to chart `6.19.0` (`open-webui:0.6.13`) fix the issue.
>
> Thanks!
_Originally posted by @2o1o0 in [#15551](https://github.com/open-webui/open-webui/issues/15551#issuecomment-3065958647)_
I am having a similar issue where I am getting erroneous error message when trying to login and some times when its successful I actually see the login screen again before it logs in.
The first time I attempt to login I get this error every time.
{"detail":"The email or password provided is incorrect. Please check for typos and try logging in again."}
Then if I go back to the root login screen and refresh, I am logged in, some times it actually shows the login screen before going to the UI.
<!-- gh-comment-id:3128784262 -->
@amelick commented on GitHub (Jul 28, 2025):
I am having a similar issue where I am getting erroneous error message when trying to login and some times when its successful I actually see the login screen again before it logs in.
The first time I attempt to login I get this error every time.
{"detail":"The email or password provided is incorrect. Please check for typos and try logging in again."}
Then if I go back to the root login screen and refresh, I am logged in, some times it actually shows the login screen before going to the UI.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @2o1o0 on GitHub (Jul 26, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/16042
Hello,
I mentioned my problem previously within another OIDC config issue, but I still get an issue on my end when upgrading the helm chart above
6.19.0(open-webui:0.6.13).I'm quite sure about my OIDC config as it was working for more than a year, and rolling back fix the issue. I checked the doc for new or updated env vars but couldn't find any.
Now I've upgraded to
6.29.0and I'm facing the same issue again, debugs logs are similar. What am I missing here?Originally posted by @2o1o0 in #15551
@amelick commented on GitHub (Jul 28, 2025):
I am having a similar issue where I am getting erroneous error message when trying to login and some times when its successful I actually see the login screen again before it logs in.
The first time I attempt to login I get this error every time.
{"detail":"The email or password provided is incorrect. Please check for typos and try logging in again."}
Then if I go back to the root login screen and refresh, I am logged in, some times it actually shows the login screen before going to the UI.