refac

backend/open_webui/models/oauth_sessions.py

@@ -135,6 +135,7 @@ class OAuthSessionTable:
                 db.refresh(result)
 
                 if result:
+                    db.expunge(result)  # Detach so dict swap is never flushed
                     result.token = token  # Return decrypted token
                     return OAuthSessionModel.model_validate(result)
                 else:

backend/open_webui/utils/oauth.py

@@ -1706,6 +1706,7 @@ class OAuthManager:
                 db=db,
             )
 
+            if session:
                 response.set_cookie(
                     key="oauth_session_id",
                     value=session.id,
@@ -1717,6 +1718,10 @@ class OAuthManager:
                 log.info(
                     f"Stored OAuth session server-side for user {user.id}, provider {provider}"
                 )
+            else:
+                log.warning(
+                    f"Failed to create OAuth session for user {user.id}, provider {provider}"
+                )
         except Exception as e:
             log.error(f"Failed to store OAuth session server-side: {e}")