Skip to content

[FEATURE]: Make server for webui safe by default #8545

Closed

Description

@douglascamata

Feature hasn't been suggested before.

  • I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

Since a little time, the webui server behavior changed due to a security issue. Now, the server can be started with a password through the env var OPENCODE_SERVER_PASSWORD, but it's still possible to have an empty password.

Things are a bit in a weird state too for opening the webui through the TUI: by default the webui just won't work.

I think it's possible to be much more safe by default, i.e. generating a random password and improving the dialog for the webui.

Activity

  1. added
    discussionUsed for feature requests, proposals, ideas, etc. Open discussion
    on Jan 14, 2026
  2. github-actions commented on Jan 14, 2026

    @github-actions
    Contributor

    This issue might be a duplicate of existing issues. Please check:

    Feel free to ignore if none of these address your specific case.

  3. thdxr commented on Mar 25, 2026

    @thdxr
    Member

    To stay organized issues are automatically closed after 90 days of no activity. If the issue is still relevant please open a new one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

discussionUsed for feature requests, proposals, ideas, etc. Open discussion

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions