scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-09-19 00:03:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
15228 commits 2 branches 170 tags 1.4 GiB
Commit graph

5734 commits

Author SHA1 Message Date
Timothy Jaeryang Baek
f96e8f04fc refac: styling 2026-02-15 23:50:34 -06:00
Timothy Jaeryang Baek
38ae91ae23 refac 2026-02-15 23:35:40 -06:00
Timothy Jaeryang Baek
88401e91c7 refac 2026-02-15 23:28:47 -06:00
Timothy Jaeryang Baek
8c5cfa530d refac: styling 2026-02-15 22:55:50 -06:00
Timothy Jaeryang Baek
d215e46315 refac: styling 2026-02-15 22:49:56 -06:00
Varun Chawla
24179cde2f
fix: preserve trailing slash in MCP server URLs (#21212) 
Stop trimming trailing slashes from MCP server URLs on save. Some MCP
servers (e.g. Bitrix24) require a trailing slash; removing it triggers a
301 redirect that drops Authorization headers, resulting in 400 errors.

The trailing-slash trim is now skipped when the connection type is 'mcp',
while OpenAPI connections continue to have it stripped as before.

Fixes open-webui#21179
 2026-02-15 19:09:41 -06:00
Timothy Jaeryang Baek
e1b3e7252c enh: preview image in file modal 2026-02-15 17:53:20 -06:00
Timothy Jaeryang Baek
9a2595f070 fix: task models issue 2026-02-14 22:26:03 -06:00
Timothy Jaeryang Baek
64fa26bd28 refac 2026-02-13 14:48:10 -06:00
Timothy Jaeryang Baek
2487c84f1f refac: styling 2026-02-13 14:47:00 -06:00
Timothy Jaeryang Baek
163211a367 refac: styling 2026-02-13 14:43:06 -06:00
Timothy Jaeryang Baek
f027a01ab2 fix: direct model access control 2026-02-13 14:39:01 -06:00
Timothy Jaeryang Baek
df6e38039f refac 2026-02-13 13:29:22 -06:00
Classic298
73776d54b8
fix: enforce public sharing permission checks across all resource types (#21358) 
The sharePublic prop in editor components (Knowledge, Tools, Skills,
Prompts, Models) incorrectly included an "|| edit" / "|| write_access"
condition, allowing users with write access to see and use the "Public"
sharing option regardless of their actual public sharing permission.
Additionally, all backend access/update endpoints only verified write
authorization but did not check the corresponding sharing.public_*
permission, allowing direct API calls to bypass frontend restrictions
entirely.
Frontend: removed the edit/write_access bypass from sharePublic in all
five editor components so visibility is gated solely by the user's
sharing.public_* permission or admin role.
Backend: added has_public_read_access_grant checks to the access/update
endpoints in knowledge.py, tools.py, prompts.py, skills.py, models.py,
and notes.py. Public grants are silently stripped when the user lacks
the corresponding permission.
Fixes #21356
 2026-02-13 11:22:32 -06:00
G30
4d5b7b3014
fix: resolve knowledge tooltip z-index issue in model edit page (#21375) 2026-02-13 11:18:35 -06:00
G30
9886ebb97f
fix: resolve knowledge collection indentation/truncation issue by correcting flex layout (#21374) 2026-02-13 11:18:14 -06:00
Timothy Jaeryang Baek
0b05b2fc7e refac 2026-02-13 00:44:01 -06:00
Timothy Jaeryang Baek
9fc1658085 refac 2026-02-12 17:42:15 -06:00
Timothy Jaeryang Baek
5297dceb2a chore: format 2026-02-12 17:36:19 -06:00
Timothy Jaeryang Baek
59afbd6f92 refac 2026-02-12 17:35:22 -06:00
Timothy Jaeryang Baek
f7af3f010e refac 2026-02-12 17:27:38 -06:00
Timothy Jaeryang Baek
bb40724d45 refac 2026-02-12 17:21:53 -06:00
Timothy Jaeryang Baek
0e64b31adb refac 2026-02-12 17:17:45 -06:00
Timothy Jaeryang Baek
5291b3dca2 refac 2026-02-12 16:36:00 -06:00
Timothy Jaeryang Baek
2a11175f22 chore: format 2026-02-12 16:13:48 -06:00
Timothy Jaeryang Baek
2ffd8d9277 refac 2026-02-12 15:40:13 -06:00
Timothy Jaeryang Baek
97331bf11d refac 2026-02-11 17:26:25 -06:00
Timothy Jaeryang Baek
f376d4f378 chore: format 2026-02-11 16:24:11 -06:00
Timothy Jaeryang Baek
9b925a115a refac 2026-02-11 16:00:19 -06:00
Timothy Jaeryang Baek
e5035ea31e refac 2026-02-11 15:55:23 -06:00
Timothy Jaeryang Baek
c8cbdc8f7f refac 2026-02-11 15:24:12 -06:00
Timothy Jaeryang Baek
64c37ab968 refac 2026-02-11 15:12:37 -06:00
Timothy Jaeryang Baek
f7c5965a70 feat: $ skills mention 2026-02-11 15:08:59 -06:00
Timothy Jaeryang Baek
46aa54b7dc refac 2026-02-11 14:35:45 -06:00
Timothy Jaeryang Baek
1973115678 feat: skills frontend 2026-02-11 14:22:26 -06:00
Timothy Jaeryang Baek
2f584c9f88 refac 2026-02-11 02:31:17 -06:00
Timothy Jaeryang Baek
4331029926 refac 2026-02-11 02:20:07 -06:00
Timothy Jaeryang Baek
3e56261c5e refac 2026-02-11 02:06:43 -06:00
Timothy Jaeryang Baek
30f72672fa refac 2026-02-10 15:57:08 -06:00
Timothy Jaeryang Baek
4aedfdc547 refac 2026-02-10 15:47:21 -06:00
Timothy Jaeryang Baek
e3a8257690 refac 2026-02-10 15:41:11 -06:00
Timothy Jaeryang Baek
c259c87806 refac 2026-02-10 15:30:16 -06:00
Timothy Jaeryang Baek
0044902c08 refac 2026-02-10 15:15:17 -06:00
Algorithm5838
e3e4e1d9d3
fix: handle Gboard clipboard strip multi-line paste via beforeinput (#21265) 
Gboard's clipboard suggestion strip sends multi-line pastes as
'insertText' in beforeinput rather than a standard paste event,
causing ProseMirror to drop the text content and insert only a
newline. Add a beforeinput handler that intercepts multi-line
insertText events on Android and manually inserts with hard breaks
to preserve the formatting.
 2026-02-09 16:15:08 -06:00
Timothy Jaeryang Baek
c2f5cb542e refac 2026-02-09 14:03:35 -06:00
Timothy Jaeryang Baek
1034b74abd refac 2026-02-09 13:48:48 -06:00
Timothy Jaeryang Baek
0a44d80252 refac 2026-02-09 13:42:27 -06:00
Tim Baek
48a0abb40f
Merge pull request #21277 from open-webui/acl 
refac: acl
 2026-02-09 13:34:36 -06:00
Timothy Jaeryang Baek
3c7f9aa6a4 refac 2026-02-09 13:28:21 -06:00
Timothy Jaeryang Baek
3ae44d11a5 refac 2026-02-08 22:37:13 -06:00