[GH-ISSUE #19475] issue: A users groups aren't always updated on OAuh login

Originally created by @tobiasge on GitHub (Nov 25, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/19475 ### Check Existing Issues - [x] I have searched for any existing and/or related issues. - [x] I have searched for any existing and/or related discussions. - [x] I have also searched in the CLOSED issues AND CLOSED discussions and found no related items (your issue might already be addressed on the development branch!). - [x] I am using the latest version of Open WebUI. ### Installation Method Docker ### Open WebUI Version v.6.40 ### Ollama Version (if applicable) _No response_ ### Operating System Docker on Ubuntu 24.04 ### Browser (if applicable) _No response_ ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have **provided every relevant configuration, setting, and environment variable used in my setup.** - [x] I have clearly **listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup** (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc). - [x] I have documented **step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation**. My steps: - Start with the initial platform/version/OS and dependencies used, - Specify exact install/launch/configure commands, - List URLs visited, user input (incl. example values/emails/passwords if needed), - Describe all options and toggles enabled or changed, - Include any files or environmental changes, - Identify the expected and actual result at each stage, - Ensure any reasonably skilled user can follow and hit the same issue. ### Expected Behavior The groups a user is are always updated with ENABLE_OAUTH_GROUP_MANAGEMENT enabled. ### Actual Behavior When a user is switched from `admin` to `user` role in the OAuth provider the groups he belongs to are only updated on the second login. ### Steps to Reproduce 1. Create user in OAuth provider with `admin` role 2. Login to Open WebUI 3. Remove `admin` role in OAuth provider, adds groups 4. Login to Open WebUI (groups are not updated) 5. Login to Open WebUI (groups are updated) ### Logs & Screenshots No relevant logs ### Additional Information _No response_

GiteaMirror commented

2026-04-25 08:24:49 -05:00

Owner

Originally created by @tobiasge on GitHub (Nov 25, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/19475

Check Existing Issues

I have searched for any existing and/or related issues.
I have searched for any existing and/or related discussions.
I have also searched in the CLOSED issues AND CLOSED discussions and found no related items (your issue might already be addressed on the development branch!).
I am using the latest version of Open WebUI.

Installation Method

Docker

Open WebUI Version

v.6.40

Ollama Version (if applicable)

No response

Operating System

Docker on Ubuntu 24.04

Browser (if applicable)

Confirmation

I have read and followed all instructions in README.md.
I am using the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have provided every relevant configuration, setting, and environment variable used in my setup.
I have clearly listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc).
I have documented step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation. My steps:
Start with the initial platform/version/OS and dependencies used,
Specify exact install/launch/configure commands,
List URLs visited, user input (incl. example values/emails/passwords if needed),
Describe all options and toggles enabled or changed,
Include any files or environmental changes,
Identify the expected and actual result at each stage,
Ensure any reasonably skilled user can follow and hit the same issue.

Expected Behavior

The groups a user is are always updated with ENABLE_OAUTH_GROUP_MANAGEMENT enabled.

Actual Behavior

When a user is switched from admin to user role in the OAuth provider the groups he belongs to are only updated on the second login.

Steps to Reproduce

Create user in OAuth provider with admin role
Login to Open WebUI
Remove admin role in OAuth provider, adds groups
Login to Open WebUI (groups are not updated)
Login to Open WebUI (groups are updated)

Logs & Screenshots

No relevant logs

Additional Information

GiteaMirror added the bug label 2026-04-25 08:24:49 -05:00

GiteaMirror closed this issue

2026-04-25 08:24:50 -05:00

[GH-ISSUE #19475] issue: A users groups aren't always updated on OAuh login #34423