issue: Auth0 SLO Integration Not Working Across Multiple Domains #6475

New Issue

GiteaMirror · 2025-11-11T16:56:21-06:00

GiteaMirror commented

2025-11-11 16:56:21 -06:00

Originally created by @sandyyy741821 on GitHub (Sep 23, 2025).

Check Existing Issues

I have searched for any existing and/or related issues.
I have searched for any existing and/or related discussions.
I am using the latest version of Open WebUI.

Installation Method

Docker

Open WebUI Version

image ID: 9c3f80b1b50f

Ollama Version (if applicable)

N/A

Operating System

Ubuntu 22.04

Browser (if applicable)

Chrome 140.0.0.0

Confirmation

I have read and followed all instructions in README.md.
I am using the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have provided every relevant configuration, setting, and environment variable used in my setup.
I have clearly listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc).
I have documented step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation. My steps:
Start with the initial platform/version/OS and dependencies used,
Specify exact install/launch/configure commands,
List URLs visited, user input (incl. example values/emails/passwords if needed),
Describe all options and toggles enabled or changed,
Include any files or environmental changes,
Identify the expected and actual result at each stage,
Ensure any reasonably skilled user can follow and hit the same issue.

Expected Behavior

Logging out from any application (React SPA or OpenWebUI) should log the user out from all applications under the same Auth0 tenant.

Actual Behavior

Logging out from React SPA only logs out that app. OpenWebUI session remains active.

Steps to Reproduce

Deploy OpenWebUI on EC2 using Docker + Nginx (default setup).
Deploy React SPA using @auth0/auth0-react SDK.
Configure both apps under the same Auth0 tenant.
Log in to React SPA → SSO works; OpenWebUI automatically logs in.

Trigger logout from React SPA:

   ``` logout({ logoutParams: { federated: true, returnTo: window.location.origin } })```

OpenWebUI session remains active; user is not logged out.

Logs & Screenshots

Attach browser console logs from React SPA logout attempt.
Attach OpenWebUI Docker logs showing no logout trigger.

Additional Information

React SPA uses getIdTokenSilently() to check session validity.
OpenWebUI does not have Auth0 SDK integration; logout relies on standard session handling.
SSO works perfectly, but RP-initiated logout across different domains is failing.

Originally created by @sandyyy741821 on GitHub (Sep 23, 2025). ### Check Existing Issues - [x] I have searched for any existing and/or related issues. - [x] I have searched for any existing and/or related discussions. - [x] I am using the latest version of Open WebUI. ### Installation Method Docker ### Open WebUI Version image ID: 9c3f80b1b50f ### Ollama Version (if applicable) N/A ### Operating System Ubuntu 22.04 ### Browser (if applicable) Chrome 140.0.0.0 ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have **provided every relevant configuration, setting, and environment variable used in my setup.** - [x] I have clearly **listed every relevant configuration, custom setting, environment variable, and command-line option that influences my setup** (such as Docker Compose overrides, .env values, browser settings, authentication configurations, etc). - [x] I have documented **step-by-step reproduction instructions that are precise, sequential, and leave nothing to interpretation**. My steps: - Start with the initial platform/version/OS and dependencies used, - Specify exact install/launch/configure commands, - List URLs visited, user input (incl. example values/emails/passwords if needed), - Describe all options and toggles enabled or changed, - Include any files or environmental changes, - Identify the expected and actual result at each stage, - Ensure any reasonably skilled user can follow and hit the same issue. ### Expected Behavior Logging out from any application (React SPA or OpenWebUI) should log the user out from all applications under the same Auth0 tenant. ### Actual Behavior Logging out from React SPA only logs out that app. OpenWebUI session remains active. ### Steps to Reproduce 1. Deploy OpenWebUI on EC2 using Docker + Nginx (default setup). 2. Deploy React SPA using @auth0/auth0-react SDK. 3. Configure both apps under the same Auth0 tenant. 4. Log in to React SPA → SSO works; OpenWebUI automatically logs in. 5. Trigger logout from React SPA: ``` logout({ logoutParams: { federated: true, returnTo: window.location.origin } })``` 6. OpenWebUI session remains active; user is not logged out. ### Logs & Screenshots - Attach browser console logs from React SPA logout attempt. - Attach OpenWebUI Docker logs showing no logout trigger. ### Additional Information - React SPA uses getIdTokenSilently() to check session validity. - OpenWebUI does not have Auth0 SDK integration; logout relies on standard session handling. - SSO works perfectly, but RP-initiated logout across different domains is failing.

GiteaMirror added the bug label 2025-11-11 16:56:22 -06:00

GiteaMirror closed this issue

2025-11-11 16:56:22 -06:00

GiteaMirror referenced this issue

2026-04-19 20:45:44 -05:00

[GH-ISSUE #6475] Error 400 Model.bin Not found #14378

GiteaMirror referenced this issue

2026-04-25 04:17:04 -05:00

[GH-ISSUE #6475] Error 400 Model.bin Not found #29906

GiteaMirror referenced this issue

2026-05-05 14:15:29 -05:00

[GH-ISSUE #6475] Error 400 Model.bin Not found #53044