scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-09-12 23:02:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

fix: reject empty update payload with 400

Browse source
This commit is contained in:
theshivam7 2026-04-07 23:57:39 +05:30
parent 8462426be0
commit 0758d63d73
No known key found for this signature in database
GPG key ID: 8ECBA284C12CAA51
1 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
backend/open_webui/routers/users.py
View file

@ -607,9 +607,6 @@ async def update_user_by_id(
hashed = get_password_hash(form_data.password)
Auths.update_user_password_by_id(user_id, hashed, db=db)
if form_data.email is not None:
Auths.update_email_by_id(user_id, form_data.email.lower(), db=db)
update_data = {
k: v
for k, v in {
@ -620,6 +617,16 @@ async def update_user_by_id(
}.items()
if v is not None
}
if not update_data and not form_data.password:
raise HTTPException(
status_code=status.HTTP_400_BAD_REQUEST,
detail='At least one field must be provided to update.',
)
if form_data.email is not None:
Auths.update_email_by_id(user_id, form_data.email.lower(), db=db)
updated_user = Users.update_user_by_id(
user_id,
update_data,