jubnl bfd2553d1e feat(auth): split OIDC_ONLY into granular auth toggles ...

Replaces the coarse oidc_only + allow_registration settings with four
independent toggles: password_login, password_registration, oidc_login,
oidc_registration. Each can be enabled/disabled individually in
Admin > Settings without affecting the others.

- Add resolveAuthToggles() in authService.ts as the central resolver;
  falls back to legacy oidc_only/allow_registration keys when new keys
  are absent (backward compat)
- OIDC_ONLY env var still works and overrides DB toggles for password_*,
  with a visual lock in the admin UI when active
- Server enforces lockout prevention: cannot disable all login methods
- oidc_login gate added to OIDC /login and /callback routes
- Remove oidc_only toggle from OIDC settings panel; replaced by the
  granular toggles in the Settings tab
- Add 6 new resolveAuthToggles() unit tests; fix AUTH-DB-033 error
  message assertion
- Update OIDC_ONLY descriptions in README, docker-compose, Helm values,
  Unraid template, and .env.example to clarify override semantics

Closes #492

2026-04-11 20:21:36 +02:00

..

templates

chore: implement helm chart release automation to gh-pages

2026-04-08 13:01:14 +02:00

Chart.yaml

chore: bump version to 2.9.13 [skip ci]

2026-04-11 13:26:44 +00:00

values.yaml

feat(auth): split OIDC_ONLY into granular auth toggles

2026-04-11 20:21:36 +02:00