Mirrors/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-07-10 20:40:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

refac

Browse Source
This commit is contained in:
Timothy Jaeryang Baek
2026-04-13 14:13:03 -05:00
parent d0188f3fe1
commit 050c4b97a9
1 changed files with 14 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
backend/open_webui/utils/oauth.py
View File

@@ -536,15 +536,20 @@ class OAuthClientManager:
'server_metadata_url': (oauth_client_info.issuer if oauth_client_info.issuer else None),
}
if oauth_client_info.server_metadata and oauth_client_info.server_metadata.code_challenge_methods_supported:
if (
isinstance(
oauth_client_info.server_metadata.code_challenge_methods_supported,
list,
)
and 'S256' in oauth_client_info.server_metadata.code_challenge_methods_supported
):
kwargs['code_challenge_method'] = 'S256'
# Default to S256 for OAuth 2.1 (PKCE is mandatory per RFC 9700)
kwargs['code_challenge_method'] = 'S256'
# Only remove PKCE if metadata explicitly excludes S256
if (
oauth_client_info.server_metadata
and oauth_client_info.server_metadata.code_challenge_methods_supported
and isinstance(
oauth_client_info.server_metadata.code_challenge_methods_supported,
list,
)
and 'S256' not in oauth_client_info.server_metadata.code_challenge_methods_supported
):
del kwargs['code_challenge_method']
self.clients[client_id] = {
'client': self.oauth.register(**kwargs),