This commit is contained in:
Timothy Jaeryang Baek
2025-09-08 14:18:25 +04:00
parent a28ca30519
commit 91755309ce
4 changed files with 30 additions and 4 deletions
+6
View File
@@ -285,8 +285,14 @@ def get_current_user(
# Delete the token cookie
response.delete_cookie("token")
# Delete OAuth token if present
if request.cookies.get("oauth_id_token"):
response.delete_cookie("oauth_id_token")
if request.cookies.get("oauth_access_token"):
response.delete_cookie("oauth_access_token")
if request.cookies.get("oauth_refresh_token"):
response.delete_cookie("oauth_refresh_token")
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail="User mismatch. Please sign in again.",
+13 -3
View File
@@ -626,6 +626,15 @@ class OAuthManager:
)
if ENABLE_OAUTH_SIGNUP.value:
oauth_id_token = token.get("id_token")
response.set_cookie(
key="oauth_id_token",
value=oauth_id_token,
httponly=True,
samesite=WEBUI_AUTH_COOKIE_SAME_SITE,
secure=WEBUI_AUTH_COOKIE_SECURE,
)
oauth_access_token = token.get("access_token")
response.set_cookie(
key="oauth_access_token",
@@ -635,12 +644,13 @@ class OAuthManager:
secure=WEBUI_AUTH_COOKIE_SECURE,
)
oauth_id_token = token.get("id_token")
oauth_refresh_token = token.get("refresh_token")
response.set_cookie(
key="oauth_id_token",
value=oauth_id_token,
key="oauth_refresh_token",
value=oauth_refresh_token,
httponly=True,
samesite=WEBUI_AUTH_COOKIE_SAME_SITE,
secure=WEBUI_AUTH_COOKIE_SECURE,
)
return response