🐛 Bug Report: OpenWebUI fails after authorization #182

Closed
opened 2025-10-07 23:56:38 +03:00 by OVERLORD · 3 comments
Owner

Originally created by @truthsword on GitHub.

Reproduction steps

Launch OpenWebUI docker.
Select PocketID authentication
PocketID opens, checkmark appears, new tab opens but... "can't reach this page"

URL has the form of http://localhost:3000/auth#token=eyJhbGciOiJI...

Expected behavior

OpenWebUP interface opens

Actual Behavior

"can't reach this page"

Browser URL has the form of http://localhost:3000/auth#token=eyJhbGciOiJI...

Version and Environment

PocketID v1.1.0 (works fine with Portainer)

Log Output

open-webui  | 2025-06-02 19:46:50.481 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /static/favicon-dark.png HTTP/1.1" 200 - {}
open-webui  | 2025-06-02 19:46:52.826 | INFO     | httpx._client:_send_single_request:1740 - HTTP Request: GET https://pocket-id.chairo.one/.well-known/openid-configuration "HTTP/1.1 200 OK" - {}
open-webui  | 2025-06-02 19:46:52.848 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /oauth/oidc/login HTTP/1.1" 302 - {}
open-webui  | 2025-06-02 19:46:54.348 | INFO     | httpx._client:_send_single_request:1740 - HTTP Request: POST https://pocket-id.chairo.one/api/oidc/token "HTTP/1.1 200 OK" - {}
open-webui  | 2025-06-02 19:46:54.378 | INFO     | httpx._client:_send_single_request:1740 - HTTP Request: GET https://pocket-id.chairo.one/.well-known/jwks.json "HTTP/1.1 200 OK" - {}
open-webui  | 2025-06-02 19:46:54.383 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /oauth/oidc/callback?code=yyy&state=xxx HTTP/1.1" 307 - {}
Originally created by @truthsword on GitHub. ### Reproduction steps Launch OpenWebUI docker. Select PocketID authentication PocketID opens, checkmark appears, new tab opens but... "can't reach this page" URL has the form of `http://localhost:3000/auth#token=eyJhbGciOiJI...` ### Expected behavior OpenWebUP interface opens ### Actual Behavior "can't reach this page" Browser URL has the form of `http://localhost:3000/auth#token=eyJhbGciOiJI...` ### Version and Environment PocketID v1.1.0 (works fine with Portainer) ### Log Output ``` open-webui | 2025-06-02 19:46:50.481 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /static/favicon-dark.png HTTP/1.1" 200 - {} open-webui | 2025-06-02 19:46:52.826 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: GET https://pocket-id.chairo.one/.well-known/openid-configuration "HTTP/1.1 200 OK" - {} open-webui | 2025-06-02 19:46:52.848 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /oauth/oidc/login HTTP/1.1" 302 - {} open-webui | 2025-06-02 19:46:54.348 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: POST https://pocket-id.chairo.one/api/oidc/token "HTTP/1.1 200 OK" - {} open-webui | 2025-06-02 19:46:54.378 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: GET https://pocket-id.chairo.one/.well-known/jwks.json "HTTP/1.1 200 OK" - {} open-webui | 2025-06-02 19:46:54.383 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /oauth/oidc/callback?code=yyy&state=xxx HTTP/1.1" 307 - {} ```
OVERLORD added the bug label 2025-10-07 23:56:38 +03:00
Author
Owner

@kmendell commented on GitHub:

Did you follow the guide here? https://pocket-id.org/docs/client-examples/open-webui? Also what do you have set for a callback url for open web ui?

@kmendell commented on GitHub: Did you follow the guide here? https://pocket-id.org/docs/client-examples/open-webui? Also what do you have set for a callback url for open web ui?
Author
Owner

@truthsword commented on GitHub:

Yes... I followed that example... seemed simple My callback URL is:

https://openwebui.mydomain.com/oauth/oidc/callback

Not sure if this matters, but this domain is only LAN accessible, and it has an LE cert.

@truthsword commented on GitHub: Yes... I followed that example... seemed simple My callback URL is: `https://openwebui.mydomain.com/oauth/oidc/callback` Not sure if this matters, but this domain is only LAN accessible, and it has an LE cert.
Author
Owner

@stonith404 commented on GitHub:

This is most likely a problem on Openwebui's side, because of that I'm converting this issue into a discussion. Did you set WEBUI_URL in OpenWebUI to https://openwebui.mydomain.com?

If that's the case please check the network tab in your Chrome dev tools for the request that is redirecting you to localhost and share a screenshot of it.

@stonith404 commented on GitHub: This is most likely a problem on Openwebui's side, because of that I'm converting this issue into a discussion. Did you set `WEBUI_URL` in OpenWebUI to `https://openwebui.mydomain.com`? If that's the case please check the network tab in your Chrome dev tools for the request that is redirecting you to localhost and share a screenshot of it.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id-pocket-id-1#182