Classic298 4815a39839 refac: apply OAuth role management on the token exchange endpoint ... The endpoint now resolves the user's role through the same role management path the OAuth callback uses, and persists it when it differs. Where role management is enabled and no roles resolve, the exchange is denied instead of falling back to DEFAULT_USER_ROLE, which would demote an existing user. Deployments whose provider returns roles only in the ID token, or whose OAUTH_ROLES_CLAIM, OAUTH_ALLOWED_ROLES or OAUTH_ADMIN_ROLES configuration is incomplete, will see token exchange rejected where it previously issued a session.		2026-08-02 23:51:41 +02:00
..
data	refac: mv backend files to /open_webui dir	2024-09-04 16:54:48 +02:00
open_webui	refac: apply OAuth role management on the token exchange endpoint	2026-08-02 23:51:41 +02:00
.dockerignore	fix: litellm config issue	2024-02-24 22:35:11 -08:00
.gitignore	refac	2024-09-06 04:59:20 +02:00
dev.sh	refac	2026-03-24 19:43:30 -05:00
requirements-min.txt	perf: optional orjson JSON codec behind ENABLE_ORJSON (#27583)	2026-07-27 03:45:37 -04:00
requirements.txt	fix: make the aiodns resolver opt-in and pin aiodns to 3.6.1 (#28242)	2026-08-10 19:52:29 -06:00
start.sh	refac	2026-06-17 03:01:11 +02:00
start_windows.bat	fix: generate valid WEBUI_SECRET_KEY in start_windows.bat (#28061)	2026-08-10 23:22:43 -06:00