github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-08-30 17:25:30 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

Cloudflare SSO Broken #860

New Issue
Closed
opened 2025-11-11 14:32:36 -06:00 by GiteaMirror · 0 comments
GiteaMirror commented 2025-11-11 14:32:36 -06:00
Owner
Copy Link
Copy Source

Originally created by @ther3zz on GitHub (May 8, 2024).

Bug Report

Looks like the most recent version pushed (v0.1.124) breaks cloudflare access SSO.

Description

When setting to variable WEBUI_AUTH_TRUSTED_EMAIL_HEADER to "Cf-Access-Authenticated-User-Email", cloudflare access no longer works.

Steps to Reproduce:

  1. set the value of WEBUI_AUTH_TRUSTED_EMAIL_HEADER to Cf-Access-Authenticated-User-Email
  2. attempt to access via cloudflare access

Expected Behavior:
It should log the user in automatically. Currently only tested via admin account.

Actual Behavior:
the UI displays a red error stating "The email or password provided is incorrect. Please check for typos and try logging in again."

Environment

  • Open WebUI Version: v0.1.124

  • Operating System: docker image ghcr.io/open-webui/open-webui:main

Reproduction Details

Confirmation:

  • I have read and followed all the instructions provided in the README.md.
  • I am on the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.

Logs and Screenshots

Browser Console Logs:
[Include relevant browser console logs, if applicable]

Docker Container Logs:
INFO:apps.web.models.auths:authenticate_user_by_trusted_header: me@email.com
INFO:apps.web.models.auths:authenticate_user:
INFO: 1.2.3.4:0 - "POST /api/v1/auths/signin HTTP/1.1" 400 Bad Request

Screenshots (if applicable):
image

Installation Method

Docker

Originally created by @ther3zz on GitHub (May 8, 2024). # Bug Report Looks like the most recent version pushed (v0.1.124) breaks cloudflare access SSO. ## Description When setting to variable WEBUI_AUTH_TRUSTED_EMAIL_HEADER to "Cf-Access-Authenticated-User-Email", cloudflare access no longer works. **Steps to Reproduce:** 1) set the value of WEBUI_AUTH_TRUSTED_EMAIL_HEADER to Cf-Access-Authenticated-User-Email 2) attempt to access via cloudflare access **Expected Behavior:** It should log the user in automatically. Currently only tested via admin account. **Actual Behavior:** the UI displays a red error stating "The email or password provided is incorrect. Please check for typos and try logging in again." ## Environment - **Open WebUI Version:** v0.1.124 - **Operating System:** docker image ghcr.io/open-webui/open-webui:main ## Reproduction Details **Confirmation:** - [x] I have read and followed all the instructions provided in the README.md. - [x] I am on the latest version of both Open WebUI and Ollama. - [ ] I have included the browser console logs. - [x] I have included the Docker container logs. ## Logs and Screenshots **Browser Console Logs:** [Include relevant browser console logs, if applicable] **Docker Container Logs:** INFO:apps.web.models.auths:authenticate_user_by_trusted_header: me@email.com INFO:apps.web.models.auths:authenticate_user: INFO: 1.2.3.4:0 - "POST /api/v1/auths/signin HTTP/1.1" 400 Bad Request **Screenshots (if applicable):** ![image](https://github.com/open-webui/open-webui/assets/40278044/e81162a8-46fe-44f7-a7eb-aedb031e18d6) ## Installation Method Docker
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#860