open-webui/backend/open_webui
Classic298 4c392c9878 fix: MCP OAuth sign-in fails when the provider's sign-in page is behind Cloudflare bot protection
Connecting an OAuth 2.1 MCP tool server such as Canva failed with "OAuth client registration is still invalid after re-registration" whenever Cloudflare answered Open WebUI's own server-side check of the provider's sign-in page with a bot challenge. The challenge page repeats the requested address, which contains the redirect URL, so Open WebUI read it as the provider rejecting its registration. Open WebUI now skips its check when it gets a bot challenge, and the browser goes on to the provider's sign-in page as usual. Real provider errors about an unknown client or redirect URL still trigger re-registration as before.

Fixes #32363
2026-10-13 18:51:14 +02:00
..
data refac: mv backend files to /open_webui dir 2024-09-04 16:54:48 +02:00
internal fix: non-English text is missed by searches and counted six times against size limits (#31615) 2026-09-30 19:19:29 +04:00
migrations refac 2026-10-12 17:29:04 +04:00
models refac 2026-10-13 17:22:11 +04:00
retrieval fix: external knowledge citation links lead to a not found error (#32233) 2026-10-12 11:57:07 +04:00
routers refac 2026-10-13 18:32:14 +04:00
socket refac 2026-10-13 01:38:49 +04:00
static refac 2026-09-06 17:27:30 -04:00
storage refac 2026-10-05 12:03:19 +04:00
tools refac 2026-10-13 19:40:48 +04:00
utils fix: MCP OAuth sign-in fails when the provider's sign-in page is behind Cloudflare bot protection 2026-10-13 18:51:14 +02:00
__init__.py refac 2026-10-05 12:17:25 +04:00
alembic.ini fix: Alembic CLI commands from failing 2025-08-15 04:17:47 -04:00
config.py refac 2026-10-13 00:29:26 +04:00
constants.py fix: SSO login failures show the email/password error (#31629) 2026-09-30 19:07:49 +04:00
env.py refac 2026-10-01 03:31:20 +04:00
events.py refac 2026-10-08 14:30:07 +04:00
functions.py refac 2026-10-08 20:33:47 +04:00
main.py refac 2026-10-13 00:43:00 +04:00
tasks.py refac 2026-09-21 08:59:39 -04:00