Justin Williams 478bc9e3f1 fix(oauth): use Protected Resource Metadata scopes in static OAuth 2.1 flow (#24690) ... The static credentials OAuth flow currently sets scope=None, relying on the OAuth provider's default scopes. This breaks providers like GitHub that default to minimal/public-only access when no scope is requested. This change reads scopes_supported from the Protected Resource Metadata document (RFC 9728) and uses them in the authorization request. Unlike the Authorization Server's scopes_supported (a full catalog of every scope the AS can grant), the PRM scopes_supported represents what the specific resource requires — making it safe to request without breaking providers like Entra ID that reject broad scope requests. Fixes the regression introduced in 349ea4ea where all scope handling was removed from the static flow.		2026-06-01 13:52:18 -07:00
..
data	refac: mv backend files to /open_webui dir	2024-09-04 16:54:48 +02:00
open_webui	fix(oauth): use Protected Resource Metadata scopes in static OAuth 2.1 flow (#24690)	2026-06-01 13:52:18 -07:00
.dockerignore	fix: litellm config issue	2024-02-24 22:35:11 -08:00
.gitignore	refac	2024-09-06 04:59:20 +02:00
dev.sh	refac	2026-03-24 19:43:30 -05:00
requirements-min.txt	refac	2026-04-24 18:20:10 +09:00
requirements.txt	refac	2026-06-01 12:24:45 -07:00
start.sh	fix: default optional env vars used with bash ,, in start.sh (#24683)	2026-05-15 09:29:25 +09:00
start_windows.bat	refac	2026-04-24 15:40:02 +09:00