OpenWebUI/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui synced 2025-06-26 18:26:48 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: ldap email case sensitive

Browse Source
This commit is contained in:
Timothy Jaeryang Baek 2025-03-03 19:52:27 -08:00
parent d844fc7edb
commit 46cea1f904
1 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
backend/open_webui/routers/auths.py
View File

@ -230,9 +230,12 @@ async def ldap_auth(request: Request, response: Response, form_data: LdapForm):
entry = connection_app.entries[0] entry = connection_app.entries[0]
username = str(entry[f"{LDAP_ATTRIBUTE_FOR_USERNAME}"]).lower() username = str(entry[f"{LDAP_ATTRIBUTE_FOR_USERNAME}"]).lower()
mail = str(entry[f"{LDAP_ATTRIBUTE_FOR_MAIL}"]) email = str(entry[f"{LDAP_ATTRIBUTE_FOR_MAIL}"])
if not mail or mail == "" or mail == "[]": if not email or email == "" or email == "[]":
raise HTTPException(400, f"User {form_data.user} does not have mail.") raise HTTPException(400, f"User {form_data.user} does not have email.")
else:
email = email.lower()
cn = str(entry["cn"]) cn = str(entry["cn"])
user_dn = entry.entry_dn user_dn = entry.entry_dn
@ -247,7 +250,7 @@ async def ldap_auth(request: Request, response: Response, form_data: LdapForm):
if not connection_user.bind(): if not connection_user.bind():
raise HTTPException(400, f"Authentication failed for {form_data.user}") raise HTTPException(400, f"Authentication failed for {form_data.user}")
user = Users.get_user_by_email(mail) user = Users.get_user_by_email(email)
if not user: if not user:
try: try:
user_count = Users.get_num_users() user_count = Users.get_num_users()
@ -259,7 +262,10 @@ async def ldap_auth(request: Request, response: Response, form_data: LdapForm):
) )
user = Auths.insert_new_auth( user = Auths.insert_new_auth(
email=mail, password=str(uuid.uuid4()), name=cn, role=role email=email,
password=str(uuid.uuid4()),
name=cn,
role=role,
) )
if not user: if not user:
@ -272,7 +278,7 @@ async def ldap_auth(request: Request, response: Response, form_data: LdapForm):
except Exception as err: except Exception as err:
raise HTTPException(500, detail=ERROR_MESSAGES.DEFAULT(err)) raise HTTPException(500, detail=ERROR_MESSAGES.DEFAULT(err))
user = Auths.authenticate_user_by_trusted_header(mail) user = Auths.authenticate_user_by_trusted_header(email)
if user: if user:
token = create_token( token = create_token(