mirror of
https://github.com/open-webui/open-terminal.git
synced 2026-11-05 01:27:28 +00:00
[PR #164] Fix multiuser root account collision #146
Labels
No labels
bug
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
open-webui/open-terminal#146
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-terminal/pull/164
Author: @maurerle
Created: 8/26/2026
Status: 🔄 Open
Base:
main← Head:fix-multiuser-root-account-collision📝 Commits (3)
ef49cabfix: prevent multi-user X-User-Id from resolving to a system accountc577b3efix: also reject the server's own account in the collision check732e970fix: prevent username truncation collisions and validate fallback📊 Changes
1 file changed (+59 additions, -14 deletions)
View changed files
📝
open_terminal/utils/user_isolation.py(+59 -14)📄 Description
This fixes account provisioning of existing usernames.
This is possible if the API is accessible to others as well which can provide arbitrary
X-user-IDvalues.Instead of this PR, this can be sanitized using
OPEN_TERMINAL_USER_PREFIX.🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.