homelab/docker-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ollama/open-webui: fix OIDC auth loop and session key persistence

Browse Source 
open-webui was sending OAuth credentials via both client_secret_basic
(header) and client_secret_post (body) simultaneously, which Authelia
rejects. Setting OAUTH_TOKEN_ENDPOINT_AUTH_METHOD=client_secret_post
forces a single method and matches the updated Authelia client config.

WEBUI_SECRET_KEY is now a stable env var so watchtower image updates
no longer invalidate all user sessions.
This commit is contained in:
poprhythm
2026-07-02 02:26:26 +00:00
parent cfefcbfe1b
commit cbbcb76fcf
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ollama/docker-compose.yml
+2
View File
@@ -32,6 +32,8 @@ services:
- OPENID_PROVIDER_URL=https://auth.kolpacksoftware.com/.well-known/openid-configuration - OPENID_PROVIDER_URL=https://auth.kolpacksoftware.com/.well-known/openid-configuration
- OAUTH_CLIENT_ID=open-webui - OAUTH_CLIENT_ID=open-webui
- OAUTH_CLIENT_SECRET=${AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI} - OAUTH_CLIENT_SECRET=${AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI}
- OAUTH_TOKEN_ENDPOINT_AUTH_METHOD=client_secret_post
- WEBUI_SECRET_KEY=${WEBUI_SECRET_KEY}
volumes: volumes:
- /srv/open-webui:/app/backend/data - /srv/open-webui:/app/backend/data
depends_on: depends_on: