mirror of
https://github.com/open-webui/open-webui.git
synced 2026-06-08 02:01:07 -05:00
[GH-ISSUE #21475] issue: v0.8.2 Atlassian MCP no oauth session found for user #35024
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @tomsaudrins on GitHub (Feb 16, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/21475
Check Existing Issues
Installation Method
Other
Open WebUI Version
v0.8.2
Ollama Version (if applicable)
No response
Operating System
Ubuntu 22.04.5 LTS
Browser (if applicable)
No response
Confirmation
README.md.Expected Behavior
We've added Atlassian MCP, created dynamic client registration successfully, and set it up using oauth 2.1 flow, same as we use for Miro MCP. The connection flow and auth flow works, it signs user in, and according to the logs, we get positive response and the following line:
Stored OAuth session server-side for user 1ed379bb-0e01-41e3-b04a-7bf9b5594140, client_id mcp:atlassian
This indicates that they have processed the logic fine, returned the token, and we store it. When we turn it on, and enable it, it fails instantly.
open_webui.utils.oauth:get_oauth_token:680 - No OAuth session found for user 1ed379bb-0e01-41e3-b04a-7bf9b5594140, client_id mcp:atlassian
I'm not entirely sure if this would be on atlassian side, or an issue on openwebui how is the oauth session stored for the users. We use entra auth for our deployment, but I'm not sure how relevant that will be here.
Actual Behavior
This should have instead passed the session oauth token correctly, and worked with Atlassian MCP. We've tried the official endpoint, and also cf. prefix, in case it was cloudflare issue.
Steps to Reproduce
Logs & Screenshots
2026-02-16 14:25:58 2026-02-16 13:25:58.918 | INFO | open_webui.utils.oauth:get_oauth_client_info_with_dynamic_client_registration:433 - Dynamic client registration successful at https://cf.mcp.atlassian.com/v1/register, client_id: <REDACTED_CLIENT_ID>
2026-02-16 14:25:58 2026-02-16 13:25:58.927 | INFO | uvicorn.protocols.http.httptools_impl:send:483 - 192.168.65.1:33953 - "POST /api/v1/configs/oauth/clients/register?type=mcp HTTP/1.1" 200
2026-02-16 14:25:59 2026-02-16 13:25:59.430 | INFO | open_webui.config:save:216 - Saving 'TOOL_SERVER_CONNECTIONS' to the database
2026-02-16 14:25:59 2026-02-16 13:25:59.443 | INFO | uvicorn.protocols.http.httptools_impl:send:483 - 192.168.65.1:33953 - "POST /api/v1/configs/tool_servers HTTP/1.1" 200
2026-02-16 14:26:00 2026-02-16 13:26:00.761 | INFO | uvicorn.protocols.http.httptools_impl:send:483 - 192.168.65.1:33953 - "GET /api/v1/models/model/profile/image?id=undefined&lang=en-US HTTP/1.1" 200
2026-02-16 14:26:00 2026-02-16 13:26:00.773 | WARNING | open_webui.utils.oauth:get_oauth_token:680 - No OAuth session found for user <REDACTED_USER_UUID>, client_id mcp:atlassian
2026-02-16 14:26:00 2026-02-16 13:26:00.775 | INFO | uvicorn.protocols.http.httptools_impl:send:483 - 192.168.65.1:33955 - "GET /api/v1/tools/ HTTP/1.1" 200
2026-02-16 14:26:00 2026-02-16 13:26:00.775 | INFO | uvicorn.protocols.http.httptools_impl:send:483 - 192.168.65.1:33956 - "GET /static/favicon.png HTTP/1.1" 304
2026-02-16 14:26:03 2026-02-16 13:26:03.465 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: GET https://mcp.atlassian.com/.well-known/oauth-authorization-server "HTTP/1.1 200 OK"
2026-02-16 14:26:03 2026-02-16 13:26:03.800 | INFO | uvicorn.protocols.http.httptools_impl:send:483 - 192.168.65.1:33955 - "GET /oauth/clients/mcp%3Aatlassian/authorize HTTP/1.1" 302
2026-02-16 14:26:11 2026-02-16 13:26:11.485 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: POST https://cf.mcp.atlassian.com/v1/token "HTTP/1.1 200 OK"
2026-02-16 14:26:11 2026-02-16 13:26:11.505 | INFO | open_webui.utils.oauth:handle_callback:890 - Stored OAuth session server-side for user <REDACTED_USER_UUID>, client_id mcp:atlassian
2026-02-16 14:26:11 2026-02-16 13:26:11.507 | INFO | uvicorn.protocols.http.httptools_impl:send:483 - 192.168.65.1:33973 - "GET /oauth/clients/mcp%3Aatlassian/callback?code=<REDACTED_AUTH_CODE>&state=<REDACTED_STATE> HTTP/1.1" 307
Additional Information
No response
@Classic298 commented on GitHub (Feb 16, 2026):
why closed? if you found a solution let everyone know :D
@hheydaroff commented on GitHub (Mar 5, 2026):
@tomsaudrins , did you find a solution for this?