maziggy 549d3216d4 feat(auth): SSO autologin + disable local username/password login (#1589) ...

Adds a global local_login_enabled setting plus a per-provider
      is_autologin flag on OIDCProvider so operators who run their own SSO
      enabled, or if the calling admin has no UserOIDCLink — either would
      lock everyone out. App-layer invariant: at most one provider can carry
      is_autologin; setting it on one clears it on every other.

      /auth/advanced-auth/status surfaces both new fields so the LoginPage
      decides UI in one query. The env-var bypass flips the reported
      local_login_enabled back to true so the SPA matches what the route
      will accept.

2026-06-28 12:46:43 +02:00

..

app

feat(auth): SSO autologin + disable local username/password login (#1589)

2026-06-28 12:46:43 +02:00

tests

feat(auth): SSO autologin + disable local username/password login (#1589)

2026-06-28 12:46:43 +02:00

__init__.py

…