mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-07 19:38:46 -05:00
[GH-ISSUE #20541] issue: Folders Menu Missing When Accessing via HTTPS Domain but visible when accessing 'locally' #34744
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @vasamaximov on GitHub (Jan 10, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/20541
Check Existing Issues
Installation Method
Docker
Open WebUI Version
v0.6.43
Ollama Version (if applicable)
No response
Operating System
Ubuntu 25.10
Browser (if applicable)
Chrome, Firefox
Confirmation
README.md.Expected Behavior
The "Folders" menu item and its content should be visible and functional regardless of access method (local IP or HTTPS domain).
Actual Behavior
When accessing via
sub.myowndomain.com:Notes menu item is not visible as well
Steps to Reproduce
http://192.168.1.14:3000https://sub.myowndomain.comLogs & Screenshots
Additional Information
Summary
The "Folders" menu item disappears from the left sidebar when accessing Open-WebUI through the HTTPS domain (
sub.myowndomain.com), but is visible when accessing via local IP (192.168.1.14:3000). This affects all browsers and installed applications.Environment
Setup Configuration
http://192.168.1.14:3000(Folders visible)https://sub.myowndomain.com(Folders missing)Infrastructure
Nginx Configuration
Affected Platforms
Problem Description
Steps to Reproduce
http://192.168.1.14:3000https://sub.myowndomain.comExpected Behavior
The "Folders" menu item and its content should be visible and functional regardless of access method (local IP or HTTPS domain).
Actual Behavior
When accessing via
sub.myowndomain.com:Screenshots
Screenshot 1: Local IP Access (Working)
Screenshot 2: HTTPS Domain Access (Broken)
Network Traffic Analysis - Diagnostic Data
1. Local IP Access:
http://192.168.1.14:3000Folders List Request
Folder Content Request (VISIBLE in Network tab)
Observation: Both requests are visible in DevTools Network tab. UI renders folders and makes child requests.
2. HTTPS Domain Access:
https://sub.myowndomain.comFolders List Request
Folder Content Request (NOT VISIBLE in Network tab)
Critical Finding: Folders API returns 200 with correct data, but the UI component does NOT render the Folders section and does NOT make child folder requests.
Open-WebUI Server Logs
Local IP Request
HTTPS Domain Request
Note: Client port shows as
:0for HTTPS requests (possible SSH tunnel/proxy artifact), but request is successful.Root Cause Analysis
Key Observation
Possible Root Causes
Cause 1: Referrer Policy / CORS / Same-Origin Issue
The frontend JavaScript may:
document.referreror origin192.168.1.14) seen as "trusted"sub.myowndomain.com) seen as "untrusted"Evidence:
Referrer Policy: strict-origin-when-cross-originpresent in both requestsCause 2: Domain Validation in Frontend
Open-WebUI frontend may contain logic like:
Cause 3: Cookie / Session State
Cause 4: Response Header Differences
Nginx may modify headers differently for each location:
X-Requested-With,X-Original-URL, etc.)Diagnostic Information
Browser Console
Response Headers Comparison Needed
Please capture response headers for both requests:
Frontend Bundle Analysis
The UI likely contains something like:
This condition differs between local and external access.
Hypothesis: Most Likely Root Cause
Location validation in Open-WebUI frontend
The application may check the request origin or URL and only render Folders for:
localhost127.0.0.1But NOT for external domains like
sub.myowndomain.com, possibly as a security or licensing feature.Evidence:
Suggested Solutions
For Users (Workaround)
None currently available. The UI element is not rendered.
For Open-WebUI Developers
Investigation Points:
Potential Fixes:
Code Areas to Review:
if (isLocalhost)or domain checksAdditional Context
Working Features Through HTTPS Proxy
Only Broken Feature
Reproduction Steps (Summary)
Files / Configuration Attached
Expected Resolution
Bug Status: Confirmed reproducible
Severity: Medium (Feature unavailable via external access)
Impact: Users cannot use Folders functionality when accessing via external domain
Workaround: None (must use local IP access)
@owui-terminator[bot] commented on GitHub (Jan 10, 2026):
🔍 Similar Issues Found
I found some existing issues that might be related to this one. Please check if any of these are duplicates or contain helpful solutions:
#19792 issue: OAuth Login redirects to https://openwebui.domain.org/oauth/oidc/openwebui.domain.org after succesful login
by StNiosem • Dec 06, 2025 •
bug#19246 issue: Access /admin/settings/images (Server connection failed)
by plitc • Nov 17, 2025 •
bug💡 Tips:
This comment was generated automatically by a bot. Please react with a 👍 if this comment was helpful, or a 👎 if it was not.
@Classic298 commented on GitHub (Jan 10, 2026):
I had an an eerily similar situation before.
I think it turned out to be CORS. Can you check your CORS configuration? What is your CORS environment variable?
@vasamaximov commented on GitHub (Jan 10, 2026):
There are no env variables related to CORS inside the container:
root@carbon:~# docker exec -it 0ec18ec1e5a5 bash root@0ec18ec1e5a5:/app/backend# env | grep -i cors root@0ec18ec1e5a5:/app/backend#As for the "external server" they are the following:
`
mcv@carbon:~$ curl -I -H "Origin: https://sub.myowndomain.com" https://sub.myowndomain.com/api/v1/folders/
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 10 Jan 2026 10:40:52 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7514
Connection: keep-alive
accept-ranges: bytes
last-modified: Mon, 22 Dec 2025 06:06:27 GMT
etag: "142bbab65ea38fa57440cd0e21256c35"
x-process-time: 0
access-control-allow-origin: *
access-control-allow-credentials: true
Access-Control-Allow-Origin: https://sub.myowndomain.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, PATCH
Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With
`
@Classic298 commented on GitHub (Jan 10, 2026):
set this
https://docs.openwebui.com/getting-started/env-configuration#cors_allow_origin