search

autobrr / autobrr

Modern, easy to use download automation for torrents and usenet.
https://autobrr.com/introduction
GNU General Public License v2.0
1.48k stars 129 forks source link

[FEATURE REQ] Allow disabling authentication (where external auth methods like Authelia/Authentik are used) #1611

Closed pentago closed 4 months ago

pentago commented 4 months ago

Is your feature request related to a problem? Please describe. Using external/proxy-level authentication methods like Authelia/Authentik currently results in a double login issue.

Describe the solution you'd like Ability to turn off authentication via login form in scenarios where a single user exists and where external/proxy-level authentication methods are used.

Describe alternatives you've considered The alternative is publicly exposing the autobrr login form, which is a privacy/security risk considering it only relies on password authentication.

Additional context N/A

KyleSanderson commented 4 months ago

doesn't Authentik/all let you specify form logins, to solve for this problem?

edit: oh. this guy https://github.com/goauthentik/authentik/issues/3440#issuecomment-2037688373 said no. There's probably better tools out there that you can utilize.

zze0s commented 4 months ago

Dupe of https://github.com/autobrr/autobrr/issues/483

Some more context here https://github.com/autobrr/autobrr/issues/979

pentago commented 3 months ago

@zze0s as an alternative, would something like Calibre Web do would be possible?

They allow setting a HTTP header name in app config that allows authentication and Authelia ships a number of headers by default.

For example, upon successful login to Authelia form, they pass on User-Name header downstream which opens an app without login form.