scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-11-06 08:07:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

feat: attribute SSO logouts in the auth.logout event payload

Browse source
This commit is contained in:
silentoplayz 2026-07-27 18:33:03 -04:00
parent c3eabb6417
commit bd71792d23
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
backend/open_webui/routers/auths.py
View file

@ -950,6 +950,9 @@ async def signout(request: Request, response: Response, db: AsyncSession = Depen
if token is None:
token = request.cookies.get('token')
oauth_session_id = request.cookies.get('oauth_session_id')
session = await OAuthSessions.get_session_by_id(oauth_session_id, db=db) if oauth_session_id else None
if token:
actor = None
data = decode_token(token)
@ -962,18 +965,16 @@ async def signout(request: Request, response: Response, db: AsyncSession = Depen
actor=actor,
subject_id=actor.id if actor else None,
subject_type='user' if actor else None,
**({'source': 'oauth', 'data': {'auth_method': 'oauth', 'provider': session.provider}} if session else {}),
)
response.delete_cookie('token')
response.delete_cookie('oui-session')
response.delete_cookie('oauth_id_token')
oauth_session_id = request.cookies.get('oauth_session_id')
if oauth_session_id:
response.delete_cookie('oauth_session_id')
session = await OAuthSessions.get_session_by_id(oauth_session_id, db=db)
# If a custom end_session_endpoint is configured (e.g. AWS Cognito), redirect
# there directly instead of attempting OIDC discovery.
openid_end_session_endpoint = await Config.get('oauth.end_session_endpoint')