[PR #369] [MERGED] Add docs for new security variables WEBUI_AUTH_COOKIE_SAME_SITE & WEBUI_AUTH_COOKIE_SECURE #470

New issue

Closed

opened 2026-10-18 14:12:18 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-18 14:12:18 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/docs/pull/369
Author: @antpyykk-kone
Created: 1/27/2025
Status: ✅ Merged
Merged: 1/29/2025
Merged by: @tjbck

Base: main ← Head: feature/add-auth-cookie-security-option-docs

📝 Commits (1)

bd5b3e1 Add documentation regarding new security cookie options

📊 Changes

1 file changed (+40 additions, -0 deletions)

View changed files

📝 docs/getting-started/advanced-topics/env-configuration.md (+40 -0)

📄 Description

Add docs regarding newly added auth cookie security options (see https://github.com/open-webui/open-webui/pull/8978).
Included info notes regarding the use of WEBUI_SESSION_COOKIE_SAME_SITE & WEBUI_SESSION_COOKIE_SECURE as fallback values.

In addition, added warning note to WEBUI_SESSION_COOKIE_SAME_SITE when using OAuth signup in combination with strict samesite value.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/docs/pull/369 **Author:** [@antpyykk-kone](https://github.com/antpyykk-kone) **Created:** 1/27/2025 **Status:** ✅ Merged **Merged:** 1/29/2025 **Merged by:** [@tjbck](https://github.com/tjbck) **Base:** `main` ← **Head:** `feature/add-auth-cookie-security-option-docs` --- ### 📝 Commits (1) - [`bd5b3e1`](https://github.com/open-webui/docs/commit/bd5b3e1f5f02a828990a76bd1c449b0a302b594f) Add documentation regarding new security cookie options ### 📊 Changes **1 file changed** (+40 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `docs/getting-started/advanced-topics/env-configuration.md` (+40 -0) </details> ### 📄 Description Add docs regarding newly added auth cookie security options (see https://github.com/open-webui/open-webui/pull/8978). Included info notes regarding the use of `WEBUI_SESSION_COOKIE_SAME_SITE` & `WEBUI_SESSION_COOKIE_SECURE` as fallback values. In addition, added warning note to `WEBUI_SESSION_COOKIE_SAME_SITE` when using OAuth signup in combination with `strict` samesite value. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-18 14:12:18 +00:00