feat: option to disable form-based login

Author: rophy

.example.env

@@ -58,6 +58,7 @@ DISALLOW_REGISTRATION=true
 # Optional - Disable anonymous link creation. Default is true.
 DISALLOW_ANONYMOUS_LINKS=true
 
+
 # Optional - This would be shown to the user on the settings page
 # It's only for display purposes and has no other use
 SERVER_IP_ADDRESS=
@@ -96,3 +97,6 @@ OIDC_CLIENT_SECRET=
 OIDC_SCOPE=
 OIDC_EMAIL_CLAIM=
 OIDC_APP_URL=
+
+# Optional - Disable form-based login. Only makes sense when OIDC_ENABLED=true.
+DISALLOW_FORM_LOGIN=false

server/env.js

@@ -50,6 +50,7 @@ const spec = {
   REDIS_DB: num({ default: 0 }),
   DISALLOW_ANONYMOUS_LINKS: bool({ default: true }),
   DISALLOW_REGISTRATION: bool({ default: true }),
+  DISALLOW_FORM_LOGIN: bool({ default: false }),
   SERVER_IP_ADDRESS: str({ default: "" }),
   SERVER_CNAME_ADDRESS: str({ default: "" }),
   CUSTOM_DOMAIN_USE_HTTPS: bool({ default: false }),

server/handlers/locals.handler.js

@@ -27,6 +27,7 @@ function config(req, res, next) {
   res.locals.server_ip_address = env.SERVER_IP_ADDRESS;
   res.locals.server_cname_address = env.SERVER_CNAME_ADDRESS;
   res.locals.disallow_registration = env.DISALLOW_REGISTRATION;
+  res.locals.disallow_form_login = env.DISALLOW_FORM_LOGIN;
   res.locals.oidc_enabled = env.OIDC_ENABLED;
   res.locals.mail_enabled = env.MAIL_ENABLED;
   res.locals.report_email = env.REPORT_EMAIL;

server/views/partials/auth/form.hbs

@@ -1,4 +1,5 @@
 <form id="login-signup" hx-post="/api/auth/login" hx-swap="outerHTML">
+  {{#unless disallow_form_login}}
   <label class="{{#if errors.email}}error{{/if}}">
     Email address:
     <input
@@ -52,14 +53,17 @@
       {{/if}}
     {{/unless}}
   </div>
+  {{/unless}}
   {{#if oidc_enabled}}
   <div class="buttons-wrapper">
     <a class="button secondary full" href="/login/oidc" title="Login with OIDC">Login with OIDC</a>
   </div>
   {{/if}}
+  {{#unless disallow_form_login}}
   {{#if mail_enabled}}
     <a class="forgot-password" href="/reset-password" title="Reset password">Forgot your password?</a>
   {{/if}}
+  {{/unless}}
   {{#unless errors}}
     {{#if error}}
       <p class="error">{{error}}</p>