Deploying Open-WebUI Without Mandatory Login

[UtkarshSingh-gitH]

Hello everyone,

I am looking to deploy Open-WebUI for my organization to provide a chatbot for our local setup documentation. However, the challenge I’m facing is that no one from the higher management chain is willing to log in, even though I have already provided a universal username and password for access.

Is there a way to allow all users to access Open-WebUI with the credentials of the single user I have created, effectively bypassing the login requirement? I understand that this means chat history will be shared among all users, but that is not a concern for us.

I would appreciate any suggestions or possible workarounds for implementing this.

Thanks in advance!

[I have checked the ENABLE_SIGNUP configuration, even though we mark it as false no new signups can be done, but people will still have to use the existing login id pass that I made to login once]
can this be bypassed ?

[taylorwilsdon]

It's already possible, called "Single User Mode" but I would recommend against it in the scenario you're describing - it's an awful idea because each person will be changing and overwriting the settings of the previous, and they'll all have admin rights. I suspect the type of people who think they're above logging in are also the exact sort of people who shouldn't have superadmin rights to something capable of arbitrary python code execution or the ability to delete their coworker's chats and saved preferences.

Single-User Mode (Disabling Login)

To bypass the login page for a single-user setup, set the WEBUI_AUTH environment variable to False:

docker run -d -p 3000:8080 -e WEBUI_AUTH=False -v open-webui:/app/backend/data --name open-webui ghcr.io/open-webui/open-webui:main

[UtkarshSingh-gitH]

I have a documentation where i am providing a link for webui as a chatbot link, i am the admin and have created the appropriate knowledgebase for it, and I have added one user, that is the ID and password I am providing to everyone who is trying to access the chatbot.

So, is it possible that the link I provide in the documentation, when pressed, automatically logs in as the universal user, and people can access it?

[taylorwilsdon]

No, that won't work - you're not using single user mode if you have multiple accounts with different permissions/roles. The only thing I can think of that would work for that case is to use trusted header delegated auth and pass the header logging the user into the User level account from the reverse proxy that's serving traffic, which would be easy enough. Just so you know though, all your users will see each other's conversations

[UtkarshSingh-gitH]

okay, so we just make changes in this :
WEBUI_AUTH = os.environ.get("WEBUI_AUTH", "True").lower() == "true"
WEBUI_AUTH_TRUSTED_EMAIL_HEADER = os.environ.get(
"WEBUI_AUTH_TRUSTED_EMAIL_HEADER", None
)

and thank you for the solution.

[taylorwilsdon]

You would set:
WEBUI_AUTH_TRUSTED_EMAIL_HEADER=X-User-Email
and then in nginx for example you'd have a config like

location / {
    proxy_pass                  http://openwebui;
    proxy_set_header            Host $host;
    proxy_set_header            X-Real-IP $remote_addr;
    proxy_set_header            X-User-Email $shared_account_email;
}

So anyone accessing it through nginx would get whatever you declare as $shared_account_email

[UtkarshSingh-gitH]

i have added nginx on my machine and I have added the server configuration as well, I have added the $env:WEBUI_AUTH_TRUSTED_EMAIL_HEADER = "X-User-Email" as well,
but where do I add my nginx server file location on openwebui codebase ?

[meowth1006]

Although it may not meet your requirements, you can consider modifying the login page code to pre-fill the specified username and password by default.

[UtkarshSingh-gitH]

[taylorwilsdon]

There’s actually a step by step guide on open webui’s site! In general you almost always have a production ready proxy like nginx involved in deploying an internet facing property.
https://docs.openwebui.com/tutorials/https-nginx

[UtkarshSingh-gitH]

Thank you so much for the guidance it is working well now.