diff --git a/packages/api/src/controllers/auth.js b/packages/api/src/controllers/auth.js index 47bc5b00c..e50ed75c8 100644 --- a/packages/api/src/controllers/auth.js +++ b/packages/api/src/controllers/auth.js @@ -67,6 +67,11 @@ function authMiddleware(req, res, next) { // const isAdminPage = req.headers['x-is-admin-page'] == 'true'; + if (process.env.SKIP_ALL_AUTH) { + // API is not authorized for basic auth + return next(); + } + if (process.env.BASIC_AUTH) { // API is not authorized for basic auth return next(); diff --git a/packages/api/src/controllers/config.js b/packages/api/src/controllers/config.js index 5c1698c4d..0706c320c 100644 --- a/packages/api/src/controllers/config.js +++ b/packages/api/src/controllers/config.js @@ -109,6 +109,7 @@ module.exports = { ), isAdminPasswordMissing, isInvalidToken: req?.isInvalidToken, + skipAllAuth: !!process.env.SKIP_ALL_AUTH, adminPasswordState: adminConfig?.adminPasswordState, storageDatabase: process.env.STORAGE_DATABASE, logsFilePath: getLogsFilePath(), diff --git a/packages/web/src/utility/api.ts b/packages/web/src/utility/api.ts index 4ba094c35..3734fe5a6 100644 --- a/packages/web/src/utility/api.ts +++ b/packages/web/src/utility/api.ts @@ -307,6 +307,9 @@ export function getAuthCategory(config) { if (getElectron()) { return 'electron'; } + if (config.skipAllAuth) { + return 'none'; + } return 'token'; }