bug: Server error on Signout with Microsoft Oauth Authentication flow #4868

Closed
opened 2025-11-11 16:05:19 -06:00 by GiteaMirror · 3 comments
Owner

Originally created by @frk-ti8m on GitHub (Apr 16, 2025).

Check Existing Issues

  • I have searched the existing issues and discussions.
  • I am using the latest version of Open WebUI.

Installation Method

Docker

Open WebUI Version

main

Ollama Version (if applicable)

none

Operating System

Ubuntu 22.04

Browser (if applicable)

Google Chrome 134.0.6998.166 (Official Build) (arm64)

Confirmation

  • I have read and followed all instructions in README.md.
  • I am using the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.
  • I have listed steps to reproduce the bug in detail.

Expected Behavior

The signout should succeed. And if I receiver a signout error from the backend, then a more desriptive error message should be displayed. Currently I receive no useful information to debug my configuration (in case something is configured wrong).

Actual Behavior

Logout fails and I receive error status 500 from the backend. See screenshot below.

Steps to Reproduce

  1. Configure and start Open WebUI using Microsoft Oauth, as described in section "Additional Information"
  2. Login with your Microsoft account
  3. Try to logout using either of the two Logout buttons

Logs & Screenshots

Image

Additional Information

I am using standard Open WebUI without Ollama. I have disabled Open WebUI Login Form and I am using Microsoft Oauth as the only login modality. I set the following environment variables:

ENABLE_SIGNUP=True
ENABLE_LOGIN_FORM=False
USE_CUDA_DOCKER=False
WEBUI_SESSION_COOKIE_SAME_SITE=lax
WEBUI_AUTH=True
OFFLINE_MODE=False
ENABLE_OAUTH_SIGNUP=True
ENABLE_API_KEY=True
ENABLE_OAUTH_ROLE_MANAGEMENT=False
OAUTH_MERGE_ACCOUNTS_BY_EMAIL=True
OAUTH_EMAIL_CLAIM="email"
OAUTH_PICTURE_CLAIM="picture"
MICROSOFT_CLIENT_ID=redacted
MICROSOFT_CLIENT_SECRET=redacted
MICROSOFT_CLIENT_TENANT_ID=redacted
MICROSOFT_OAUTH_SCOPE="offline_access openid profile email"
MICROSOFT_REDIRECT_URI=redacted/oauth/microsoft/callback

Originally created by @frk-ti8m on GitHub (Apr 16, 2025). ### Check Existing Issues - [x] I have searched the existing issues and discussions. - [x] I am using the latest version of Open WebUI. ### Installation Method Docker ### Open WebUI Version main ### Ollama Version (if applicable) none ### Operating System Ubuntu 22.04 ### Browser (if applicable) Google Chrome 134.0.6998.166 (Official Build) (arm64) ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have listed steps to reproduce the bug in detail. ### Expected Behavior The signout should succeed. And if I receiver a signout error from the backend, then a more desriptive error message should be displayed. Currently I receive no useful information to debug my configuration (in case something is configured wrong). ### Actual Behavior Logout fails and I receive error status 500 from the backend. See screenshot below. ### Steps to Reproduce 1. Configure and start Open WebUI using Microsoft Oauth, as described in section "Additional Information" 2. Login with your Microsoft account 3. Try to logout using either of the two Logout buttons ### Logs & Screenshots ![Image](https://github.com/user-attachments/assets/9261f695-4c76-4ace-a5d5-19d7c1d7b156) ### Additional Information I am using standard Open WebUI without Ollama. I have disabled Open WebUI Login Form and I am using Microsoft Oauth as the only login modality. I set the following environment variables: ENABLE_SIGNUP=True ENABLE_LOGIN_FORM=False USE_CUDA_DOCKER=False WEBUI_SESSION_COOKIE_SAME_SITE=lax WEBUI_AUTH=True OFFLINE_MODE=False ENABLE_OAUTH_SIGNUP=True ENABLE_API_KEY=True ENABLE_OAUTH_ROLE_MANAGEMENT=False OAUTH_MERGE_ACCOUNTS_BY_EMAIL=True OAUTH_EMAIL_CLAIM="email" OAUTH_PICTURE_CLAIM="picture" MICROSOFT_CLIENT_ID=redacted MICROSOFT_CLIENT_SECRET=redacted MICROSOFT_CLIENT_TENANT_ID=redacted MICROSOFT_OAUTH_SCOPE="offline_access openid profile email" MICROSOFT_REDIRECT_URI=redacted/oauth/microsoft/callback
GiteaMirror added the bug label 2025-11-11 16:05:19 -06:00
Author
Owner

@almajo commented on GitHub (Apr 16, 2025):

Not sure if you did cut it out for GitHub but the redirect_url needs to include your endpoint, e.g. "http://localhost:8080/oauth/microsoft/callback"

@almajo commented on GitHub (Apr 16, 2025): Not sure if you did cut it out for GitHub but the redirect_url needs to include your endpoint, e.g. "http://localhost:8080/oauth/microsoft/callback"
Author
Owner

@frk-ti8m commented on GitHub (Apr 16, 2025):

Sorry Github markdown fucked it up, I redacted that part of the url, but that redirect is functional.

@frk-ti8m commented on GitHub (Apr 16, 2025): Sorry Github markdown fucked it up, I redacted that part of the url, but that redirect is functional.
Author
Owner

@frk-ti8m commented on GitHub (Apr 16, 2025):

The exact same bug has actually been reported here: https://github.com/open-webui/open-webui/issues/12581

But still no solution exists as of now.

@frk-ti8m commented on GitHub (Apr 16, 2025): The exact same bug has actually been reported here: https://github.com/open-webui/open-webui/issues/12581 But still no solution exists as of now.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#4868