open-webui/backend/open_webui/routers
Classic298 a680f21e12
feat: make OAuth admin settings read-only when ENABLE_OAUTH_PERSISTENT_CONFIG is off (#28276)
When ENABLE_OAUTH_PERSISTENT_CONFIG is off (the default), oauth.* config is
never persisted and is read from environment variables, but the admin panel
still let admins edit the OAuth/OIDC fields and silently dropped every save on
restart, which kept confusing users who missed the docs warning
(open-webui/open-webui#28247).

The OAuth/OIDC section is now read-only in that case: the admin oauth config
endpoint reports the flag and the UI wraps the section in a disabled fieldset,
slightly dimmed with every control inert but all values still visible, plus a
note naming the env var. Saving skips the OAuth POST since nothing can change.
With the flag enabled the section behaves exactly as before.

Known limits: the guard is UI-side only (the POST endpoint keeps accepting
writes, unchanged), and disabled fields mean values cannot be selected and the
masked client secret cannot be revealed while read-only. Switch.svelte gains a
disabled:cursor-not-allowed style that applies to any disabled switch app-wide.

Co-authored-by: Tim Baek <tim@openwebui.com>
2026-08-10 21:41:07 -06:00
..
analytics.py refac 2026-06-29 01:38:41 -05:00
audio.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
auths.py feat: make OAuth admin settings read-only when ENABLE_OAUTH_PERSISTENT_CONFIG is off (#28276) 2026-08-10 21:41:07 -06:00
automations.py refac 2026-07-26 19:34:41 -04:00
calendar.py refac 2026-06-29 13:03:14 -05:00
channels.py refac 2026-08-10 20:00:43 -06:00
chats.py refac: share one folder write-access check across chat folder_id paths (#28366) 2026-08-10 19:17:18 -06:00
configs.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
evaluations.py refac 2026-07-24 02:36:10 -04:00
files.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
folders.py chore: format 2026-07-27 04:38:46 -04:00
functions.py refac 2026-07-26 19:10:41 -04:00
groups.py refac 2026-06-29 05:47:21 -05:00
images.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
knowledge.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
memories.py refac 2026-07-27 01:59:17 -04:00
models.py chore: remove dead json imports (#27815) 2026-07-31 17:25:40 -04:00
notes.py chore: remove dead json imports (#27815) 2026-07-31 17:25:40 -04:00
notifications.py refac 2026-07-27 19:39:36 -04:00
ollama.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
openai.py perf: build debug log messages lazily so disabled debug logs cost nothing (#27834) 2026-07-31 19:09:01 -05:00
pipelines.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
prompts.py refac 2026-06-29 13:03:14 -05:00
retrieval.py fix(retrieval): report why a URL could not be read instead of blaming the knowledge base (#28362) 2026-08-10 19:18:04 -06:00
scim.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
skills.py refac 2026-07-17 04:11:11 -04:00
tasks.py perf: build info log messages lazily so raising the log level actually saves work (#27837) 2026-08-02 15:39:10 -05:00
terminals.py refac 2026-08-09 13:22:46 -06:00
tools.py fix: do not expose tool source code to read-only users (#27005) 2026-07-27 01:51:01 -04:00
users.py refac 2026-08-10 19:16:21 -06:00
utils.py refac 2026-06-17 02:52:35 +02:00