3 people 41573d52f1 fix: require an authenticated user on the Ollama version route (#27199) ...

get_ollama_versions was the only Ollama route besides the static health check without an authentication dependency, so an anonymous caller could read the configured backend's version string and, by walking url_idx until the lookup raised, count the configured backends.

Nothing depends on the route being public. The frontend wrapper takes a token and sends it on every call, and its three call sites (admin model management, the model selector and the About panel) all pass an authenticated token, so the client already treats this as an authenticated route. Add the same get_verified_user dependency the sibling routes carry.

Co-authored-by: Grg0rry <Grg0rry@users.noreply.github.com>

2026-07-27 00:44:31 -04:00

..

data

…

open_webui

fix: require an authenticated user on the Ollama version route (#27199)

2026-07-27 00:44:31 -04:00

.dockerignore

…

.gitignore

…

dev.sh

…

requirements-min.txt

refac

2026-07-26 23:03:32 -04:00

requirements.txt

perf: stop resolving DNS on the thread pool (add aiodns) (#27440)

2026-07-26 23:29:52 -04:00

start_windows.bat

…

start.sh

…