mirror of
https://github.com/open-webui/open-webui.git
synced 2026-09-17 23:52:29 +00:00
8cf75e5c18
User valves (per-user API keys/config for tools and functions) were stored as plaintext JSON in the database. This adds Fernet symmetric encryption at the model layer so valve data is encrypted at rest. - Uses WEBUI_SECRET_KEY for encryption (no extra env var needed) - Add valve_encryption.py with encrypt/decrypt helpers using Fernet - Wire encrypt/decrypt in tools and functions model get/update methods - Add migration 019 to encrypt existing plaintext valve data - Backward compatible: decrypt_user_valves handles legacy plaintext dicts Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| data | ||
| internal | ||
| migrations | ||
| models | ||
| retrieval | ||
| routers | ||
| socket | ||
| static | ||
| storage | ||
| test | ||
| tools | ||
| utils | ||
| __init__.py | ||
| alembic.ini | ||
| config.py | ||
| constants.py | ||
| env.py | ||
| functions.py | ||
| main.py | ||
| tasks.py | ||