🐛 Bug Report: OpenWebUI fails after authorization #320

Closed
opened 2026-02-04 18:49:55 +03:00 by OVERLORD · 3 comments
Owner

Originally created by @truthsword on GitHub (Jun 2, 2025).

Reproduction steps

Launch OpenWebUI docker.
Select PocketID authentication
PocketID opens, checkmark appears, new tab opens but... "can't reach this page"

URL has the form of http://localhost:3000/auth#token=eyJhbGciOiJI...

Expected behavior

OpenWebUP interface opens

Actual Behavior

"can't reach this page"

Browser URL has the form of http://localhost:3000/auth#token=eyJhbGciOiJI...

Version and Environment

PocketID v1.1.0 (works fine with Portainer)

Log Output

open-webui  | 2025-06-02 19:46:50.481 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /static/favicon-dark.png HTTP/1.1" 200 - {}
open-webui  | 2025-06-02 19:46:52.826 | INFO     | httpx._client:_send_single_request:1740 - HTTP Request: GET https://pocket-id.chairo.one/.well-known/openid-configuration "HTTP/1.1 200 OK" - {}
open-webui  | 2025-06-02 19:46:52.848 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /oauth/oidc/login HTTP/1.1" 302 - {}
open-webui  | 2025-06-02 19:46:54.348 | INFO     | httpx._client:_send_single_request:1740 - HTTP Request: POST https://pocket-id.chairo.one/api/oidc/token "HTTP/1.1 200 OK" - {}
open-webui  | 2025-06-02 19:46:54.378 | INFO     | httpx._client:_send_single_request:1740 - HTTP Request: GET https://pocket-id.chairo.one/.well-known/jwks.json "HTTP/1.1 200 OK" - {}
open-webui  | 2025-06-02 19:46:54.383 | INFO     | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /oauth/oidc/callback?code=yyy&state=xxx HTTP/1.1" 307 - {}
Originally created by @truthsword on GitHub (Jun 2, 2025). ### Reproduction steps Launch OpenWebUI docker. Select PocketID authentication PocketID opens, checkmark appears, new tab opens but... "can't reach this page" URL has the form of `http://localhost:3000/auth#token=eyJhbGciOiJI...` ### Expected behavior OpenWebUP interface opens ### Actual Behavior "can't reach this page" Browser URL has the form of `http://localhost:3000/auth#token=eyJhbGciOiJI...` ### Version and Environment PocketID v1.1.0 (works fine with Portainer) ### Log Output ``` open-webui | 2025-06-02 19:46:50.481 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /static/favicon-dark.png HTTP/1.1" 200 - {} open-webui | 2025-06-02 19:46:52.826 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: GET https://pocket-id.chairo.one/.well-known/openid-configuration "HTTP/1.1 200 OK" - {} open-webui | 2025-06-02 19:46:52.848 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /oauth/oidc/login HTTP/1.1" 302 - {} open-webui | 2025-06-02 19:46:54.348 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: POST https://pocket-id.chairo.one/api/oidc/token "HTTP/1.1 200 OK" - {} open-webui | 2025-06-02 19:46:54.378 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: GET https://pocket-id.chairo.one/.well-known/jwks.json "HTTP/1.1 200 OK" - {} open-webui | 2025-06-02 19:46:54.383 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 192.168.10.10:0 - "GET /oauth/oidc/callback?code=yyy&state=xxx HTTP/1.1" 307 - {} ```
OVERLORD added the bug label 2026-02-04 18:49:55 +03:00
Author
Owner

@kmendell commented on GitHub (Jun 3, 2025):

Did you follow the guide here? https://pocket-id.org/docs/client-examples/open-webui? Also what do you have set for a callback url for open web ui?

@kmendell commented on GitHub (Jun 3, 2025): Did you follow the guide here? https://pocket-id.org/docs/client-examples/open-webui? Also what do you have set for a callback url for open web ui?
Author
Owner

@truthsword commented on GitHub (Jun 3, 2025):

Yes... I followed that example... seemed simple My callback URL is:

https://openwebui.mydomain.com/oauth/oidc/callback

Not sure if this matters, but this domain is only LAN accessible, and it has an LE cert.

@truthsword commented on GitHub (Jun 3, 2025): Yes... I followed that example... seemed simple My callback URL is: `https://openwebui.mydomain.com/oauth/oidc/callback` Not sure if this matters, but this domain is only LAN accessible, and it has an LE cert.
Author
Owner

@stonith404 commented on GitHub (Jun 3, 2025):

This is most likely a problem on Openwebui's side, because of that I'm converting this issue into a discussion. Did you set WEBUI_URL in OpenWebUI to https://openwebui.mydomain.com?

If that's the case please check the network tab in your Chrome dev tools for the request that is redirecting you to localhost and share a screenshot of it.

@stonith404 commented on GitHub (Jun 3, 2025): This is most likely a problem on Openwebui's side, because of that I'm converting this issue into a discussion. Did you set `WEBUI_URL` in OpenWebUI to `https://openwebui.mydomain.com`? If that's the case please check the network tab in your Chrome dev tools for the request that is redirecting you to localhost and share a screenshot of it.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id#320