Classic298 f6b85700ea fix: gate OpenAI catch-all proxy behind ENABLE_OPENAI_API_PASSTHROUGH toggle (#23640) ...

The catch-all /{path:path} proxy forwards any request to the upstream OpenAI-compatible API with the admin's API key and no access control. This is an intentional proxy but should be opt-in.

Adds ENABLE_OPENAI_API_PASSTHROUGH env var (defaults to False). When disabled, the catch-all returns 403. No other routers (Ollama, responses) have catch-all proxies.

2026-04-12 14:26:12 -05:00

..

data

refac: mv backend files to /open_webui dir

2024-09-04 16:54:48 +02:00

open_webui

fix: gate OpenAI catch-all proxy behind ENABLE_OPENAI_API_PASSTHROUGH toggle (#23640)

2026-04-12 14:26:12 -05:00

.dockerignore

…

.gitignore

refac

2024-09-06 04:59:20 +02:00

dev.sh

refac

2026-03-24 19:43:30 -05:00

requirements-min.txt

refac: async db

2026-04-12 14:22:11 -05:00

requirements.txt

refac: async db

2026-04-12 14:22:11 -05:00

start_windows.bat

refac

2026-03-24 19:43:30 -05:00

start.sh

refac

2026-03-24 19:43:30 -05:00