[FEATURE]: Make server for webui safe by default #5931

Open
opened 2026-02-16 17:58:32 -05:00 by yindo · 0 comments
Owner

Originally created by @douglascamata on GitHub (Jan 14, 2026).

Originally assigned to: @thdxr on GitHub.

Feature hasn't been suggested before.

  • I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

Since a little time, the webui server behavior changed due to a security issue. Now, the server can be started with a password through the env var OPENCODE_SERVER_PASSWORD, but it's still possible to have an empty password.

Things are a bit in a weird state too for opening the webui through the TUI: by default the webui just won't work.

I think it's possible to be much more safe by default, i.e. generating a random password and improving the dialog for the webui.

Originally created by @douglascamata on GitHub (Jan 14, 2026). Originally assigned to: @thdxr on GitHub. ### Feature hasn't been suggested before. - [x] I have verified this feature I'm about to request hasn't been suggested before. ### Describe the enhancement you want to request Since a little time, the webui server behavior changed due to a security issue. Now, the server can be started with a password through the env var `OPENCODE_SERVER_PASSWORD`, but it's still possible to have an empty password. Things are a bit in a weird state too for opening the webui through the TUI: by default the webui just won't work. I think it's possible to be much more safe by default, i.e. generating a random password and improving the dialog for the webui.
yindo added the discussion label 2026-02-16 17:58:32 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#5931