[PR #3984] [MERGED] Flag to disable login UI and endpoints for credentialed auth #4486

Closed
opened 2026-02-22 18:35:56 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/Mintplex-Labs/anything-llm/pull/3984
Author: @timothycarambat
Created: 6/11/2025
Status: Merged
Merged: 6/11/2025
Merged by: @timothycarambat

Base: masterHead: 3982-disable-login-simple-sso


📝 Commits (3)

  • 071dd10 Flag to disable login UI and endpoints for credentialed auth
  • 5e040b6 dev build
  • 4900fd3 fix translation key

📊 Changes

14 files changed (+177 additions, -44 deletions)

View changed files

📝 .github/workflows/dev-build.yaml (+1 -1)
📝 docker/.env.example (+1 -0)
frontend/src/hooks/useSimpleSSO.js (+33 -0)
📝 frontend/src/pages/Login/SSO/simple.jsx (+3 -3)
📝 frontend/src/pages/Login/index.jsx (+14 -1)
📝 frontend/src/pages/OnboardingFlow/Steps/UserSetup/index.jsx (+1 -1)
📝 frontend/src/utils/paths.js (+5 -0)
📝 server/.env.example (+1 -0)
📝 server/endpoints/admin.js (+8 -1)
📝 server/endpoints/invite.js (+43 -36)
📝 server/endpoints/system.js (+15 -1)
📝 server/models/systemSettings.js (+6 -0)
📝 server/utils/helpers/updateENV.js (+1 -0)
📝 server/utils/middleware/simpleSSOEnabled.js (+45 -0)

📄 Description

Pull Request Type

  • feat
  • 🐛 fix
  • ♻️ refactor
  • 💄 style
  • 🔨 chore
  • 📝 docs

Relevant Issues

resolves #3982
https://github.com/Mintplex-Labs/anythingllm-docs/pull/173

What is in this change?

  • Disables the traditional login pages and backend endpoints the SIMPLE_SSO_NO_LOGIN is set in ENV config.

This requires SIMPLE_SSO_ENABLED and multi-user mode enabled to take effect. It will have no impact on non-authenticated or password-only configurations

When enabled:

  • The /login page will auto redirect to the token auth page
  • The backend request-token endpoint will 403 on request
  • Creation of new invitations will be blocked on backend (error visible in UI)
  • Accepting new invitations where the new user can specify username/password is also blocked.

Additional Information

Developer Validations

  • I ran yarn lint from the root of the repo & committed changes
  • Relevant documentation has been updated
  • I have tested my code functionality
  • Docker build succeeds locally

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Mintplex-Labs/anything-llm/pull/3984 **Author:** [@timothycarambat](https://github.com/timothycarambat) **Created:** 6/11/2025 **Status:** ✅ Merged **Merged:** 6/11/2025 **Merged by:** [@timothycarambat](https://github.com/timothycarambat) **Base:** `master` ← **Head:** `3982-disable-login-simple-sso` --- ### 📝 Commits (3) - [`071dd10`](https://github.com/Mintplex-Labs/anything-llm/commit/071dd10cd114c24c3faaf4ab98285c158329d4e1) Flag to disable login UI and endpoints for credentialed auth - [`5e040b6`](https://github.com/Mintplex-Labs/anything-llm/commit/5e040b6597afe03c6867bb3cf088d1d71cc9adca) dev build - [`4900fd3`](https://github.com/Mintplex-Labs/anything-llm/commit/4900fd3e5744fc0bbd0e6875c73d127a02c0662c) fix translation key ### 📊 Changes **14 files changed** (+177 additions, -44 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/dev-build.yaml` (+1 -1) 📝 `docker/.env.example` (+1 -0) ➕ `frontend/src/hooks/useSimpleSSO.js` (+33 -0) 📝 `frontend/src/pages/Login/SSO/simple.jsx` (+3 -3) 📝 `frontend/src/pages/Login/index.jsx` (+14 -1) 📝 `frontend/src/pages/OnboardingFlow/Steps/UserSetup/index.jsx` (+1 -1) 📝 `frontend/src/utils/paths.js` (+5 -0) 📝 `server/.env.example` (+1 -0) 📝 `server/endpoints/admin.js` (+8 -1) 📝 `server/endpoints/invite.js` (+43 -36) 📝 `server/endpoints/system.js` (+15 -1) 📝 `server/models/systemSettings.js` (+6 -0) 📝 `server/utils/helpers/updateENV.js` (+1 -0) 📝 `server/utils/middleware/simpleSSOEnabled.js` (+45 -0) </details> ### 📄 Description ### Pull Request Type <!-- For change type, change [ ] to [x]. --> - [x] ✨ feat - [ ] 🐛 fix - [ ] ♻️ refactor - [ ] 💄 style - [ ] 🔨 chore - [ ] 📝 docs ### Relevant Issues <!-- Use "resolves #xxx" to auto resolve on merge. Otherwise, please use "connect #xxx" --> resolves #3982 https://github.com/Mintplex-Labs/anythingllm-docs/pull/173 ### What is in this change? - Disables the traditional login pages and backend endpoints the `SIMPLE_SSO_NO_LOGIN` is set in ENV config. This requires `SIMPLE_SSO_ENABLED` **and** multi-user mode enabled to take effect. It will have no impact on non-authenticated or password-only configurations When enabled: - The `/login` page will auto redirect to the token auth page - The backend `request-token` endpoint will `403` on request - Creation of new invitations will be blocked on backend (error visible in UI) - Accepting new invitations where the new user can specify username/password is also blocked. <!-- Describe the changes in this PR that are impactful to the repo. --> ### Additional Information <!-- Add any other context about the Pull Request here that was not captured above. --> ### Developer Validations <!-- All of the applicable items should be checked. --> - [x] I ran `yarn lint` from the root of the repo & committed changes - [x] Relevant documentation has been updated - [x] I have tested my code functionality - [x] Docker build succeeds locally --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-22 18:35:56 -05:00
yindo closed this issue 2026-02-22 18:35:56 -05:00
yindo changed title from [PR #3984] Flag to disable login UI and endpoints for credentialed auth to [PR #3984] [MERGED] Flag to disable login UI and endpoints for credentialed auth 2026-06-05 15:18:49 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#4486