mirror of
https://github.com/open-webui/open-webui.git
synced 2026-09-17 23:52:29 +00:00
8cf75e5c18
User valves (per-user API keys/config for tools and functions) were stored as plaintext JSON in the database. This adds Fernet symmetric encryption at the model layer so valve data is encrypted at rest. - Uses WEBUI_SECRET_KEY for encryption (no extra env var needed) - Add valve_encryption.py with encrypt/decrypt helpers using Fernet - Wire encrypt/decrypt in tools and functions model get/update methods - Add migration 019 to encrypt existing plaintext valve data - Backward compatible: decrypt_user_valves handles legacy plaintext dicts Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| access_control | ||
| images | ||
| mcp | ||
| telemetry | ||
| actions.py | ||
| anthropic.py | ||
| audit.py | ||
| auth.py | ||
| automations.py | ||
| channels.py | ||
| chat.py | ||
| code_interpreter.py | ||
| embeddings.py | ||
| files.py | ||
| filter.py | ||
| groups.py | ||
| headers.py | ||
| logger.py | ||
| middleware.py | ||
| misc.py | ||
| models.py | ||
| oauth.py | ||
| payload.py | ||
| pdf_generator.py | ||
| plugin.py | ||
| rate_limit.py | ||
| redis.py | ||
| response.py | ||
| sanitize.py | ||
| security_headers.py | ||
| session_pool.py | ||
| task.py | ||
| tools.py | ||
| validate.py | ||
| valve_encryption.py | ||
| webhook.py | ||