vrr/open-webui-openwebui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-07-09 16:09:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

refac

Browse source
This commit is contained in:
Timothy Jaeryang Baek 2026-07-01 02:57:29 -05:00
parent c416c6cad6
commit 9562f036f8
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
backend/open_webui/utils/oauth.py
View file

@ -24,6 +24,8 @@ from fastapi import (
HTTPException,
status,
)
from joserfc.jws import JWSRegistry
from joserfc.registry import HeaderParameter
from mcp.shared.auth import (
OAuthClientMetadata as MCPOAuthClientMetadata,
)
@ -187,6 +189,14 @@ async def get_oauth_runtime_config() -> SimpleNamespace:
DEFAULT_TOKEN_EXPIRY_SECONDS = 3600
# Apereo CAS includes client_id in ID token JWS headers; Authlib 1.7/joserfc
# rejects unknown headers unless we register the provider extension.
JWSRegistry.default_header_registry.setdefault(
'client_id',
HeaderParameter('OAuth client identifier', 'str'),
)
def _normalize_token_expiry(token: dict) -> dict:
"""Ensure a token dict always has a numeric ``expires_at``.