Mirrors/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2025-12-16 11:57:51 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: implement OAuth logout functionality for keyclock to terminate sso session

Browse Source
This commit is contained in:
Zaiban Ali
2024-12-07 13:49:12 +01:00
parent c4ea31357f
commit d5ce85f34a
3 changed files with 33 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
backend/open_webui/utils/oauth.py
View File

@@ -20,6 +20,7 @@ from open_webui.config import (
OAUTH_MERGE_ACCOUNTS_BY_EMAIL,
OAUTH_PROVIDERS,
ENABLE_OAUTH_ROLE_MANAGEMENT,
OAUTH_PROVIDER_NAME,
OAUTH_ROLES_CLAIM,
OAUTH_EMAIL_CLAIM,
OAUTH_PICTURE_CLAIM,
@@ -252,10 +253,19 @@ class OAuthManager:
samesite=WEBUI_SESSION_COOKIE_SAME_SITE,
secure=WEBUI_SESSION_COOKIE_SECURE,
)
if OAUTH_PROVIDER_NAME.value == "keycloak":
id_token = token.get("id_token")
response.set_cookie(
key="id_token",
value=id_token,
httponly=True,
samesite=WEBUI_SESSION_COOKIE_SAME_SITE,
secure=WEBUI_SESSION_COOKIE_SECURE,
)
# Redirect back to the frontend with the JWT token
redirect_url = f"{request.base_url}auth#token={jwt_token}"
return RedirectResponse(url=redirect_url)
return RedirectResponse(url=redirect_url, headers=response.headers)
oauth_manager = OAuthManager()