scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-10-11 03:38:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

fix: name the secret key when stored MFA secrets cannot be decrypted at startup (#32189)

Browse source
This commit is contained in:
G30 2026-10-10 12:10:39 -04:00 • committed by GitHub
parent 8aa61fcd6c
commit 170ec28a1a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
backend/open_webui/utils/mfa.py
View file

@ -410,7 +410,13 @@ async def validate_mfa_configuration(config: MfaConfigForm | None = None):
if value is not None:
mfa = MfaData.model_validate(value)
if mfa.secret:
decrypt_secret(mfa.secret)
try:
cipher().decrypt(mfa.secret.encode())
except InvalidToken:
raise ValueError(
'Stored MFA secrets cannot be decrypted. '
'Restore the WEBUI_SECRET_KEY or MFA_ENCRYPTION_KEY they were encrypted with.'
) from None
async def update_mfa_config(request, updates: dict) -> bool: