github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-05-06 19:08:59 -05:00
Code Issues 1.3k Packages Projects Releases 126 Wiki Activity

Cloudflare SSO Broken #860

New Issue
Closed
opened 2025-11-11 14:32:36 -06:00 by GiteaMirror · 0 comments
GiteaMirror commented 2025-11-11 14:32:36 -06:00
Owner
Copy Link

Originally created by @ther3zz on GitHub (May 8, 2024).

Bug Report

Looks like the most recent version pushed (v0.1.124) breaks cloudflare access SSO.

Description

When setting to variable WEBUI_AUTH_TRUSTED_EMAIL_HEADER to "Cf-Access-Authenticated-User-Email", cloudflare access no longer works.

Steps to Reproduce:

  1. set the value of WEBUI_AUTH_TRUSTED_EMAIL_HEADER to Cf-Access-Authenticated-User-Email
  2. attempt to access via cloudflare access

Expected Behavior:
It should log the user in automatically. Currently only tested via admin account.

Actual Behavior:
the UI displays a red error stating "The email or password provided is incorrect. Please check for typos and try logging in again."

Environment

  • Open WebUI Version: v0.1.124

  • Operating System: docker image ghcr.io/open-webui/open-webui:main

Reproduction Details

Confirmation:

  • I have read and followed all the instructions provided in the README.md.
  • I am on the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.

Logs and Screenshots

Browser Console Logs:
[Include relevant browser console logs, if applicable]

Docker Container Logs:
INFO:apps.web.models.auths:authenticate_user_by_trusted_header: me@email.com
INFO:apps.web.models.auths:authenticate_user:
INFO: 1.2.3.4:0 - "POST /api/v1/auths/signin HTTP/1.1" 400 Bad Request

Screenshots (if applicable):
image

Installation Method

Docker

Originally created by @ther3zz on GitHub (May 8, 2024). # Bug Report Looks like the most recent version pushed (v0.1.124) breaks cloudflare access SSO. ## Description When setting to variable WEBUI_AUTH_TRUSTED_EMAIL_HEADER to "Cf-Access-Authenticated-User-Email", cloudflare access no longer works. **Steps to Reproduce:** 1) set the value of WEBUI_AUTH_TRUSTED_EMAIL_HEADER to Cf-Access-Authenticated-User-Email 2) attempt to access via cloudflare access **Expected Behavior:** It should log the user in automatically. Currently only tested via admin account. **Actual Behavior:** the UI displays a red error stating "The email or password provided is incorrect. Please check for typos and try logging in again." ## Environment - **Open WebUI Version:** v0.1.124 - **Operating System:** docker image ghcr.io/open-webui/open-webui:main ## Reproduction Details **Confirmation:** - [x] I have read and followed all the instructions provided in the README.md. - [x] I am on the latest version of both Open WebUI and Ollama. - [ ] I have included the browser console logs. - [x] I have included the Docker container logs. ## Logs and Screenshots **Browser Console Logs:** [Include relevant browser console logs, if applicable] **Docker Container Logs:** INFO:apps.web.models.auths:authenticate_user_by_trusted_header: me@email.com INFO:apps.web.models.auths:authenticate_user: INFO: 1.2.3.4:0 - "POST /api/v1/auths/signin HTTP/1.1" 400 Bad Request **Screenshots (if applicable):** ![image](https://github.com/open-webui/open-webui/assets/40278044/e81162a8-46fe-44f7-a7eb-aedb031e18d6) ## Installation Method Docker
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#860
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?