bug: redirects to localhost:3000 on 0.6.11 azure ad sso #5341

New Issue

Closed

opened 2025-11-11 16:17:55 -06:00 by GiteaMirror · 17 comments

GiteaMirror commented 2025-11-11 16:17:55 -06:00

Owner

Copy Link

Copy Source

Originally created by @fanuelsen on GitHub (May 27, 2025).

Check Existing Issues

• I have searched the existing issues and discussions.

Problem Description

After updating the docker container to the latest version login with azure got broken for me, i get this error in the logs on the client: "localhost:3000/auth#token=eyJhbGciOiJIUzl1NilsInR5cCI6IkpXVCJ9.eyJpZCI6ImFmZD
RhMzg5LTg0YjAtNDgxNi1iY2MyLWM4Y2RIZGNIOTEyNiJ9.7qaZ7WXrfd2LG8GbMcZLrxy
ZRUxZ1PwQ7tqwaynOtFQ" because Safari can't connect to the server "localhost".

the open-webui
2025-05-27 06:53:27.959 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - - "GET /oauth/microsoft/callback?code=redacted &session_state=redacted HTTP/1.1" 307 - {}

Desired Solution you'd like

to logon as i used to do in version 0.6.10

Alternatives Considered

No response

Additional Context

This happend after pulling the new image. 0.6.11

Originally created by @fanuelsen on GitHub (May 27, 2025). ### Check Existing Issues - [x] I have searched the existing issues and discussions. ### Problem Description After updating the docker container to the latest version login with azure got broken for me, i get this error in the logs on the client: "localhost:3000/auth#token=eyJhbGciOiJIUzl1NilsInR5cCI6IkpXVCJ9.eyJpZCI6ImFmZD RhMzg5LTg0YjAtNDgxNi1iY2MyLWM4Y2RIZGNIOTEyNiJ9.7qaZ7WXrfd2LG8GbMcZLrxy ZRUxZ1PwQ7tqwaynOtFQ" because Safari can't connect to the server "localhost". the open-webui 2025-05-27 06:53:27.959 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - - "GET /oauth/microsoft/callback?code=redacted &session_state=redacted HTTP/1.1" 307 - {} ### Desired Solution you'd like to logon as i used to do in version 0.6.10 ### Alternatives Considered _No response_ ### Additional Context This happend after pulling the new image. 0.6.11

GiteaMirror closed this issue 2025-11-11 16:17:55 -06:00

GiteaMirror commented 2025-11-11 16:17:56 -06:00

Author

Owner

Copy Link

Copy Source

@tsueri commented on GitHub (May 27, 2025):

I use it with zitadel and got the same problem.

@tsueri commented on GitHub (May 27, 2025): I use it with zitadel and got the same problem.

GiteaMirror commented 2025-11-11 16:17:56 -06:00

Author

Owner

Copy Link

Copy Source

@Breidenbach-Murach commented on GitHub (May 27, 2025):

We have the same issue after the update to 0.6.11.
A simple rollback of the container using the "0.6.10" tag did not fix it, as the login prompt seemingly gets stuck after the redirect.

@Breidenbach-Murach commented on GitHub (May 27, 2025): We have the same issue after the update to 0.6.11. A simple rollback of the container using the "0.6.10" tag did not fix it, as the login prompt seemingly gets stuck after the redirect.

GiteaMirror commented 2025-11-11 16:17:56 -06:00

Author

Owner

Copy Link

Copy Source

@tsueri commented on GitHub (May 27, 2025):

I "fixed" it by manually rolling back the Commit d4c3cfb

@tsueri commented on GitHub (May 27, 2025): I "fixed" it by manually rolling back the Commit d4c3cfb

GiteaMirror commented 2025-11-11 16:17:57 -06:00

Author

Owner

Copy Link

Copy Source

@tjbck commented on GitHub (May 27, 2025):

PLEASE READ THE CHANGELOGS BEFORE UPDATING

@tjbck commented on GitHub (May 27, 2025): PLEASE READ THE CHANGELOGS BEFORE UPDATING 

GiteaMirror commented 2025-11-11 16:17:57 -06:00

Author

Owner

Copy Link

Copy Source

@tsueri commented on GitHub (May 27, 2025):

I have read the changelog. My problem persists even with the environment variable.

This is my compose.yml:

services:
    open-webui:
        ports:
            - 3000:8080
        environment:
            - OLLAMA_BASE_URL=redacted
            - OLLAMA_AUTH_TRUSTED_HEADER=X-Remote-User
            - OAUTH_CLIENT_ID=redacted
            - OAUTH_CLIENT_SECRET=redacted
            - OPENID_PROVIDER_URL=redacted
            - OAUTH_PROVIDER_NAME=SSO
            - OAUTH_SCOPES=openid email profile
            - ENABLE_OAUTH_ROLE_MANAGEMENT=true
            - ENABLE_OAUTH_SIGNUP=true
            - OAUTH_ROLES_CLAIM=user.roles
            - OAUTH_ALLOWED_ROLES=user
            - OAUTH_ADMIN_ROLES=admin
            - WEBUI_URL=https://redacted
        volumes:
            - ./data:/app/backend/data
        container_name: open-webui
        restart: always
        image: ghcr.io/open-webui/open-webui:main
    watchtower:
        image: containrrr/watchtower
        volumes:
          - /var/run/docker.sock:/var/run/docker.sock
        command: --interval 300 open-webui
        depends_on:
          - open-webui

@tsueri commented on GitHub (May 27, 2025): I have read the changelog. My problem persists even with the environment variable. This is my compose.yml: ``` services: open-webui: ports: - 3000:8080 environment: - OLLAMA_BASE_URL=redacted - OLLAMA_AUTH_TRUSTED_HEADER=X-Remote-User - OAUTH_CLIENT_ID=redacted - OAUTH_CLIENT_SECRET=redacted - OPENID_PROVIDER_URL=redacted - OAUTH_PROVIDER_NAME=SSO - OAUTH_SCOPES=openid email profile - ENABLE_OAUTH_ROLE_MANAGEMENT=true - ENABLE_OAUTH_SIGNUP=true - OAUTH_ROLES_CLAIM=user.roles - OAUTH_ALLOWED_ROLES=user - OAUTH_ADMIN_ROLES=admin - WEBUI_URL=https://redacted volumes: - ./data:/app/backend/data container_name: open-webui restart: always image: ghcr.io/open-webui/open-webui:main watchtower: image: containrrr/watchtower volumes: - /var/run/docker.sock:/var/run/docker.sock command: --interval 300 open-webui depends_on: - open-webui ```

GiteaMirror commented 2025-11-11 16:17:58 -06:00

Author

Owner

Copy Link

Copy Source

@fanuelsen commented on GitHub (May 27, 2025):

I see you expose a host port, do you add the port in the webui_url? It worked for me when adding the env var, but i'm running it behind a reverse proxy.

here are the docs:
https://docs.openwebui.com/tutorials/integrations/browser-search-engine#step-1-set-the-webui_url-environment-variable

@fanuelsen commented on GitHub (May 27, 2025): I see you expose a host port, do you add the port in the webui_url? It worked for me when adding the env var, but i'm running it behind a reverse proxy. here are the docs: https://docs.openwebui.com/tutorials/integrations/browser-search-engine#step-1-set-the-webui_url-environment-variable

GiteaMirror commented 2025-11-11 16:17:58 -06:00

Author

Owner

Copy Link

Copy Source

@Classic298 commented on GitHub (May 27, 2025):

@tsueri do not set the environment variable. It is a persistent config.

Instead set the WEB UI URL in the admin panel and try again.

@Classic298 commented on GitHub (May 27, 2025): @tsueri do not set the environment variable. It is a persistent config. Instead set the WEB UI URL in the admin panel and try again.

GiteaMirror commented 2025-11-11 16:17:58 -06:00

Author

Owner

Copy Link

Copy Source

@tsueri commented on GitHub (May 27, 2025):

@tsueri do not set the environment variable. It is a persistent config.

Instead set the WEB UI URL in the admin panel and try again.

That worked! Thank you!

@tsueri commented on GitHub (May 27, 2025): > [@tsueri](https://github.com/tsueri) do not set the environment variable. It is a persistent config. > > Instead set the WEB UI URL in the admin panel and try again. That worked! Thank you!

GiteaMirror commented 2025-11-11 16:17:58 -06:00

Author

Owner

Copy Link

Copy Source

@ArcCal commented on GitHub (May 28, 2025):

Encountered the exact same problem

@ArcCal commented on GitHub (May 28, 2025): Encountered the exact same problem

GiteaMirror commented 2025-11-11 16:17:59 -06:00

Author

Owner

Copy Link

Copy Source

@cwittenberg commented on GitHub (Jun 2, 2025):

@tsueri do not set the environment variable. It is a persistent config.

Instead set the WEB UI URL in the admin panel and try again.

This worked. Would suggest documentation or perhaps an additional envvar on this - that overrides the UI?

@cwittenberg commented on GitHub (Jun 2, 2025): > [@tsueri](https://github.com/tsueri) do not set the environment variable. It is a persistent config. > > Instead set the WEB UI URL in the admin panel and try again. This worked. Would suggest documentation or perhaps an additional envvar on this - that overrides the UI?

GiteaMirror commented 2025-11-11 16:17:59 -06:00

Author

Owner

Copy Link

Copy Source

@aleprj commented on GitHub (Jun 2, 2025):

@tsueri do not set the environment variable. It is a persistent config.
Instead set the WEB UI URL in the admin panel and try again.

This worked. Would suggest documentation or perhaps an additional envvar on this - that overrides the UI?

I think it should be an additional var for this redirect. It's a change intented for a very specific corner case and probably broke things for more people than the ones that will actually benefit from it.

Anyway, if we are going to keep things this way, some documentation needs updating:

• env-configuration says WEBUI_URL is used for search engine support.
• features/sso has no reference for WEBUI_URL at all

Someone starting a clean install will be lost right now.

@aleprj commented on GitHub (Jun 2, 2025): > > [@tsueri](https://github.com/tsueri) do not set the environment variable. It is a persistent config. > > Instead set the WEB UI URL in the admin panel and try again. > > This worked. Would suggest documentation or perhaps an additional envvar on this - that overrides the UI? I think it should be an additional var for this redirect. It's a change intented for a very specific corner case and probably broke things for more people than the ones that will actually benefit from it. Anyway, if we are going to keep things this way, some documentation needs updating: - env-configuration says WEBUI_URL is used for search engine support. - features/sso has no reference for WEBUI_URL at all Someone starting a clean install will be lost right now.

GiteaMirror commented 2025-11-11 16:17:59 -06:00

Author

Owner

Copy Link

Copy Source

@Classic298 commented on GitHub (Jun 2, 2025):

Feel free to update the docs

@Classic298 commented on GitHub (Jun 2, 2025): Feel free to update the docs

GiteaMirror commented 2025-11-11 16:18:00 -06:00

Author

Owner

Copy Link

Copy Source

@avmturo commented on GitHub (Jun 5, 2025):

Does this not mean, that if you are deploying a new instance, with a new database, the first user, if using oidc, will not be able to log in? If there is no user yet to access the admin panel, how can someone update the WEBUI_URL?

@avmturo commented on GitHub (Jun 5, 2025): Does this not mean, that if you are deploying a new instance, with a new database, the first user, if using oidc, will not be able to log in? If there is no user yet to access the admin panel, how can someone update the WEBUI_URL?

GiteaMirror commented 2025-11-11 16:18:00 -06:00

Author

Owner

Copy Link

Copy Source

@Classic298 commented on GitHub (Jun 5, 2025):

@avmturo use DISABLE_PERSISTENT_CONFIG and use that to then set the WEBUI_URL (check docs for exact env var names, this is from the top of my head)

but to answer your question: there's a way for everything

@Classic298 commented on GitHub (Jun 5, 2025): @avmturo use DISABLE_PERSISTENT_CONFIG and use that to then set the WEBUI_URL (check docs for exact env var names, this is from the top of my head) but to answer your question: there's a way for everything

GiteaMirror commented 2025-11-11 16:18:00 -06:00

Author

Owner

Copy Link

Copy Source

@avmturo commented on GitHub (Jun 5, 2025):

@tsueri do not set the environment variable. It is a persistent config.

Instead set the WEB UI URL in the admin panel and try again.

Ahh okay, I was confused by this one. Checked the doc and it iis an environment variable. So if you are deploying a new isntance, even with persistant config, it should work with using the env var. If I'm not mistaken

@avmturo commented on GitHub (Jun 5, 2025): > [@tsueri](https://github.com/tsueri) do not set the environment variable. It is a persistent config. > > Instead set the WEB UI URL in the admin panel and try again. Ahh okay, I was confused by this one. Checked the doc and it iis an environment variable. So if you are deploying a new isntance, even with persistant config, it should work with using the env var. If I'm not mistaken

GiteaMirror commented 2025-11-11 16:18:00 -06:00

Author

Owner

Copy Link

Copy Source

@aleprj commented on GitHub (Jun 5, 2025):

@tsueri do not set the environment variable. It is a persistent config.
Instead set the WEB UI URL in the admin panel and try again.

Ahh okay, I was confused by this one. Checked the doc and it iis an environment variable. So if you are deploying a new isntance, even with persistant config, it should work with using the env var. If I'm not mistaken

Unless you already started it before and the database was generated. This env var has a default value, so if the system was already started I would just delete the database, since it's a new setup anyway. I usually start my aplications before configuring SSO, so it would probably happen.

@aleprj commented on GitHub (Jun 5, 2025): > > [@tsueri](https://github.com/tsueri) do not set the environment variable. It is a persistent config. > > Instead set the WEB UI URL in the admin panel and try again. > > Ahh okay, I was confused by this one. Checked the doc and it iis an environment variable. So if you are deploying a new isntance, even with persistant config, it should work with using the env var. If I'm not mistaken Unless you already started it before and the database was generated. This env var has a default value, so if the system was already started I would just delete the database, since it's a new setup anyway. I usually start my aplications before configuring SSO, so it would probably happen.

GiteaMirror commented 2025-11-11 16:18:01 -06:00

Author

Owner

Copy Link

Copy Source

@aleprj commented on GitHub (Jun 5, 2025):

@avmturo use DISABLE_PERSISTENT_CONFIG and use that to then set the WEBUI_URL (check docs for exact env var names, this is from the top of my head)

but to answer your question: there's a way for everything

The var is ENABLE_PERSISTENT_CONFIG (need to set to false). But how does it work? If I set it to false it will use the env var only for this specific run or will it save the new value as well (ie. it disables only loading of the variables, or does not touch them at all)?

@aleprj commented on GitHub (Jun 5, 2025): > [@avmturo](https://github.com/avmturo) use DISABLE_PERSISTENT_CONFIG and use that to then set the WEBUI_URL (check docs for exact env var names, this is from the top of my head) > > but to answer your question: there's a way for everything The var is ENABLE_PERSISTENT_CONFIG (need to set to false). But how does it work? If I set it to false it will use the env var only for this specific run or will it save the new value as well (ie. it disables only loading of the variables, or does not touch them at all)?

GiteaMirror referenced this issue 2026-04-19 20:28:40 -05:00

[GH-ISSUE #5341] Can open webui set the maximum number of rounds for multiple conversations #13949

GiteaMirror referenced this issue 2026-04-25 03:52:49 -05:00

[GH-ISSUE #5341] Can open webui set the maximum number of rounds for multiple conversations #29477

GiteaMirror referenced this issue 2026-05-05 13:43:18 -05:00

[GH-ISSUE #5341] Can open webui set the maximum number of rounds for multiple conversations #52615

GiteaMirror referenced this issue 2026-05-13 00:54:11 -05:00

[GH-ISSUE #5341] Can open webui set the maximum number of rounds for multiple conversations #68553

GiteaMirror referenced this issue 2026-05-15 09:29:45 -05:00

[GH-ISSUE #5341] Can open webui set the maximum number of rounds for multiple conversations #84689

GiteaMirror referenced this issue 2026-05-17 22:38:33 -05:00

[GH-ISSUE #5341] Can open webui set the maximum number of rounds for multiple conversations #100944

GiteaMirror referenced this issue 2026-05-20 18:52:11 -05:00

[GH-ISSUE #5341] Can open webui set the maximum number of rounds for multiple conversations #117259

GiteaMirror referenced this issue 2026-05-24 23:02:07 -05:00

[GH-ISSUE #5341] Can open webui set the maximum number of rounds for multiple conversations #133676

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

dev

v0.11.0

v0.10.2

v0.10.1

v0.10.0

v0.9.6

v0.9.5

v0.9.4

v0.9.3

v0.9.2

v0.9.1

v0.9.0

v0.8.12

v0.8.11

v0.8.10

v0.8.9

v0.8.8

v0.8.7

v0.8.6

v0.8.5

v0.8.4

v0.8.3

v0.8.2

v0.8.1

v0.8.0

v0.7.2

v0.7.1

v0.7.0

v0.6.43

v0.6.42

v0.6.41

v0.6.40

v0.6.39

v0.6.38

v0.6.37

v0.6.36

v0.6.35

v0.6.34

v0.6.33

v0.6.32

v0.6.31

v0.6.30

v0.6.29

v0.6.28

v0.6.27

v0.6.26

v0.6.25

v0.6.24

v0.6.23

v0.6.22

v0.6.21

v0.6.20

v0.6.19

v0.6.18

v0.6.17

v0.6.16

v0.6.15

v0.6.14

v0.6.13

v0.6.12

v0.6.11

v0.6.10

v0.6.9

v0.6.8

v0.6.7

v0.6.6

v0.6.5

v0.6.4

v0.6.3

v0.6.2

v0.6.1

v0.6.0

v0.5.20

v0.5.19

v0.5.18

v0.5.17

v0.5.16

v0.5.15

v0.5.14

v0.5.13

v0.5.12

v0.5.11

v0.5.10

v0.5.9

v0.5.8

v0.5.7

v0.5.6

v0.5.5

v0.5.4

v0.5.3

v0.5.2

v0.5.1

v0.5.0

v0.4.8

v0.4.7

v0.4.6

v0.4.5

v0.4.4

v0.4.3

v0.4.2

v0.4.1

v0.4.0

v0.3.35

v0.3.34

v0.3.33

v0.3.32

v0.3.31

v0.3.30

v0.3.29

v0.3.28

v0.3.27

v0.3.26

v0.3.25

v0.3.24

v0.3.23

v0.3.22

v0.3.21

v0.3.20

v0.3.19

v0.3.18

v0.3.17

v0.3.16

v0.3.15

v0.3.14

v0.3.13

v0.3.12

v0.3.11

v0.3.10

v0.3.9

v0.3.8

v0.3.7

v0.3.6

v0.3.5

v0.3.4

v0.3.3

v0.3.2

v0.3.1

v0.3.0

v0.2.5

v0.2.4

v0.2.3

v0.2.2

v0.2.1

v0.2.0

v0.1.125

v0.1.124

v0.1.123

v0.1.122

v0.1.121

v0.1.120

v0.1.119

v0.1.118

v0.1.117

v0.1.116

v0.1.115

v0.1.114

v0.1.113

v0.1.112

v0.1.111

v0.1.110

v0.1.109

v0.1.108

v0.1.107

v0.1.106

v0.1.105

v0.1.104

v0.1.103

v0.1.102

Labels

Clear labels

bug

confirmed

confirmed issue

core

documentation

enhancement

good first issue

help wanted

non-core

pull-request

Mirrored from GitHub Pull Request

python

question

testing wanted

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

GiteaMirror ninjasurge (Kaehlen Rog)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#5341