Commit Graph

20 Commits

Author SHA1 Message Date
iamcristi
b4cd685795
Update auths.py
changed Auths.insert_new_auth for LDAP accounts. Previously setting image to "None" was causing an error.
2024-11-22 17:23:49 +02:00
alexey_rechkalov
b1237cf389 Fixed security vulnerability: now LDAP password hashes are not stored, same as trusted header auth.
LDAP users role now getting DEFAULT_USER_ROLE, not "pending".
2024-11-21 18:09:29 +05:00
Timothy Jaeryang Baek
70c6d3bf9f fix 2024-11-19 18:21:55 -08:00
Timothy Jaeryang Baek
206a4877c7 fix: api key creation 2024-11-19 18:17:38 -08:00
Timothy Jaeryang Baek
7a585fbaf3 enh: option to disable api auth 2024-11-19 12:17:23 -08:00
Antti Pyykkönen
979e6e5a79 feat: support for configuring private api key use 2024-11-19 16:14:52 +02:00
Timothy Jaeryang Baek
c0371f6525 enh: user permissions 2024-11-16 21:07:56 -08:00
Timothy Jaeryang Baek
1f36cad9ef
Fix code scanning alert no. 129: LDAP query built from user-controlled sources
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2024-11-05 18:10:16 -05:00
morgan55555
5d934d7d15 feat: LDAP User management
LDAP will be used as default if no other auth form is enabled.
LDAP now will work with ENABLE_LOGIN_FORM = false.
Fixed exception "User does not match the record."
Now LDAP login is case insensitive.
Integrated with onboarding feature.
2024-11-06 03:30:23 +05:00
Timothy J. Baek
98cea8aaa4 refac: automatically disable new sign ups after first user 2024-11-03 01:25:41 -08:00
Timothy J. Baek
e9e49babf8 enh: remove token cookie on signout 2024-10-24 13:35:29 -07:00
Timothy J. Baek
b4cd503a02 refac 2024-10-15 02:51:08 -07:00
Timothy J. Baek
97bb9d41a6 refac 2024-10-15 02:48:41 -07:00
Timothy Jaeryang Baek
db35ea0ae1
Merge pull request #6129 from open-webui/main
refac
2024-10-11 12:11:47 -07:00
Timothy J. Baek
e8babe62bc refac 2024-10-10 12:51:00 -07:00
Jeetesh Chellani
a2e889c8bb fix: set oauth token secure and samesite per config 2024-10-09 14:50:48 +03:00
Timothy J. Baek
00f6b4bf09 refac 2024-09-21 15:35:35 +02:00
Timothy J. Baek
9126ceac08 fix: WEBUI_AUTH=False not working issue 2024-09-21 15:33:34 +02:00
Timothy J. Baek
d0df2cbe53 fix: disable "enable new sign ups" not working issue 2024-09-14 23:13:52 +01:00
Timothy J. Baek
03d5a670f6 refac: mv backend files to /open_webui dir 2024-09-04 16:54:48 +02:00