[PR #19149] [MERGED] fix: Incorrect authorization header value on verifying OAuth mcp server #48156

New Issue

GiteaMirror · 2026-04-29T23:41:37-05:00

GiteaMirror commented

2026-04-29 23:41:37 -05:00

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/19149
Author: @Oleg52
Created: 11/12/2025
Status: ✅ Merged
Merged: 11/12/2025
Merged by: @tjbck

Base: dev ← Head: fix/verify-oauth-mcp-connection

📝 Commits (1)

1477a13 fix verify mcp connection with oauth type

📊 Changes

1 file changed (+9 additions, -4 deletions)

View changed files

📝 backend/open_webui/routers/configs.py (+9 -4)

📄 Description

Pull Request Checklist

Before submitting, make sure you've checked the following:

Target branch: Verify that the pull request targets the dev branch. Not targeting the dev branch will lead to immediate closure of the PR.
Description: Provide a concise description of the changes made in this pull request down below.
Changelog: Ensure a changelog entry following the format of Keep a Changelog is added at the bottom of the PR description.
Documentation: If necessary, update relevant documentation Open WebUI Docs like environment variables, the tutorials, or other documentation sources.
Dependencies: Are there any new dependencies? Have you updated the dependency versions in the documentation?
Testing: Perform manual tests to verify the implemented fix/feature works as intended AND does not break any other functionality. Take this as an opportunity to make screenshots of the feature/fix and include it in the PR description.
Agentic AI Code: Confirm this Pull Request is not written by any AI Agent or has at least gone through additional human review AND manual testing. If any AI Agent is the co-author of this PR, it may lead to immediate closure of the PR.
Code review: Have you performed a self-review of your code, addressing any coding standard issues and ensuring adherence to the project's coding standards?
Title Prefix: To clearly categorize this pull request, prefix the pull request title using one of the following:
- fix: Bug fix or error correction

Changelog Entry

Description

This PR fixes bug in verify mcp server logic with system_oauth type, actual access_token must be set in the authorization header instead of whole oauth_token dictionary.

Added

Changed

Deprecated

Removed

Fixed

Updated verify_tool_servers_config function in backend/open_webui/routers/configs.py to extract correct token from access_token dictionary.

Security

Breaking Changes

Additional Information

This PR fixes [GH-ISSUE #20319] Issue: Missing field for entering the Mieru Cloud API key (#19148)

Screenshots or Videos

Contributor License Agreement

By submitting this pull request, I confirm that I have read and fully agree to the Contributor License Agreement (CLA), and I am providing my contributions under its terms.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/19149 **Author:** [@Oleg52](https://github.com/Oleg52) **Created:** 11/12/2025 **Status:** ✅ Merged **Merged:** 11/12/2025 **Merged by:** [@tjbck](https://github.com/tjbck) **Base:** `dev` ← **Head:** `fix/verify-oauth-mcp-connection` --- ### 📝 Commits (1) - [`1477a13`](https://github.com/open-webui/open-webui/commit/1477a13db7b776ce108d7d2f15fd998bcaf85e30) fix verify mcp connection with oauth type ### 📊 Changes **1 file changed** (+9 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `backend/open_webui/routers/configs.py` (+9 -4) </details> ### 📄 Description # Pull Request Checklist **Before submitting, make sure you've checked the following:** - [x] **Target branch:** Verify that the pull request targets the `dev` branch. **Not targeting the `dev` branch will lead to immediate closure of the PR.** - [x] **Description:** Provide a concise description of the changes made in this pull request down below. - [x] **Changelog:** Ensure a changelog entry following the format of [Keep a Changelog](https://keepachangelog.com/) is added at the bottom of the PR description. - [x] **Documentation:** If necessary, update relevant documentation [Open WebUI Docs](https://github.com/open-webui/docs) like environment variables, the tutorials, or other documentation sources. - [x] **Dependencies:** Are there any new dependencies? Have you updated the dependency versions in the documentation? - [x] **Testing:** Perform manual tests to **verify the implemented fix/feature works as intended AND does not break any other functionality**. Take this as an opportunity to **make screenshots of the feature/fix and include it in the PR description**. - [x] **Agentic AI Code:** Confirm this Pull Request is **not written by any AI Agent** or has at least **gone through additional human review AND manual testing**. If any AI Agent is the co-author of this PR, it may lead to immediate closure of the PR. - [x] **Code review:** Have you performed a self-review of your code, addressing any coding standard issues and ensuring adherence to the project's coding standards? - [x] **Title Prefix:** To clearly categorize this pull request, prefix the pull request title using one of the following: - **fix**: Bug fix or error correction # Changelog Entry ### Description - This PR fixes bug in verify mcp server logic with `system_oauth` type, actual `access_token` must be set in the authorization header instead of whole `oauth_token` dictionary. ### Added - ### Changed - ### Deprecated - ### Removed - ### Fixed - Updated `verify_tool_servers_config` function in `backend/open_webui/routers/configs.py` to extract correct token from `access_token` dictionary. ### Security - ### Breaking Changes - --- ### Additional Information - This PR fixes #19148 ### Screenshots or Videos - ### Contributor License Agreement By submitting this pull request, I confirm that I have read and fully agree to the [Contributor License Agreement (CLA)](https://github.com/open-webui/open-webui/blob/main/CONTRIBUTOR_LICENSE_AGREEMENT), and I am providing my contributions under its terms. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-04-29 23:41:37 -05:00

GiteaMirror closed this issue

2026-04-29 23:41:39 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#48156