scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-09-10 22:43:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

allow fallback on invalid tokens; strip email

Browse source
This commit is contained in:
Chris Rotella 2026-04-03 11:02:41 -04:00
parent a7e5caf62e
commit 0f2a76bdc5
1 changed files with 10 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
backend/open_webui/main.py
View file

@ -2046,25 +2046,29 @@ async def get_app_config(request: Request):
if not token and 'token' in request.cookies:
token = request.cookies.get('token')
invalid_token = False
if token:
try:
data = decode_token(token)
except Exception as e:
log.debug(e)
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail='Invalid token',
)
if data is not None and 'id' in data:
invalid_token = True
if not invalid_token and data is not None and 'id' in data:
user = Users.get_user_by_id(data['id'])
if user is None and WEBUI_AUTH_TRUSTED_EMAIL_HEADER:
trusted_email = request.headers.get(
WEBUI_AUTH_TRUSTED_EMAIL_HEADER, ''
).lower()
).strip().lower()
if trusted_email:
user = Users.get_user_by_email(trusted_email)
if user is None and invalid_token:
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail='Invalid token',
)
user_count = Users.get_num_users()
onboarding = False