Auto login or disable login?

[cysec404]

Hi, I'm really enjoying this app, it's super user friendly and easy to use so I think my family will finally adopt it as a central repository for all our recipes.

Is there a way to not require a login and retain the same functionality of a logged in user? This is only accessible in my home network. For my family to use and adopt it like I want them to, I need to remove the need to login. I would like any of them to be able to pull up the page and start using it, whether just reading a recipe or entering a new one.

Thanks so much!

[hay-kot]

Currently there is no plan for this. Managing some sort of switch to allow users to turn on/off login is too much for me to maintain long term. In the future, I'll be adding an environmental variable to set token timeouts. Then you could have your family login once and then set an arbitrary long token time so they only have to re-login every once in a while.

[Christoph-87]

@Northguy Yes, I also think that OpenID Connect would be the best. But I will not be able to contribute anything for this, because I do not know exactly how this works. Does OpenID Connect already work with Authelia since I see from the documentation that it is still in beta? https://www.authelia.com/docs/configuration/identity-providers/oidc.html

[Northguy]

@Christoph-87 yes, it is functional but not out of Beta stage yet. As you can see in that table, there are still enhancements to be made. For non-production use in a home environment it is perfectly useable though. And as said: I have it working with Bookstack and planning to integrate it with some other apps in near future.

[tekchip]

Would GRC's SQRL be a solution here? https://www.grc.com/sqrl/sqrl.htm If i'm missing the goal or the point here I apologize.

[BobWs]

How to use / setup OAuth2 ? I can't find any documentation about it.
Love your app by the way, testing it at the moment and compering it with Tandoor/Recipes. But at first sight I do prefer your way of setup and ease...

[hay-kot]

@BobWs OAuth2 isn't currently supported.

Not something that's on my radar, but happy to accept a Pull Request that provides this functionality.

[virtux]

Hi @hay-kot, in 2024 is it possible disable login or a workaround (token-time, define safe network, autologin...)
For home users, it would be helpful to allow the family to add recipes without remembering and logging in each time.

Thanks!
ps great job with the software!

[boc-the-git]

@virtux in 2024 security is more important than ever!

There is an environment variable TOKEN_TIME to set the number of hours a session lasts for. Give that a go, and see if it works for you 😄
https://nightly.mealie.io/documentation/getting-started/installation/backend-config/

[Prekzz]

On the same note as the TOKEN_TIME parameter. Is it possible to just completely run it internally, especially without the use of HTTPS/SSL. And still can copy things from my shopping list?

[hay-kot]

No, this is a browser limitation and not something we can do anything about.