feat(auth): add Authentik OIDC provider + CAP_DISABLE_EMAIL_AUTH flag#1869

Open

stig-codes wants to merge 7 commits into

CapSoftware:mainfrom

stig-codes:feat/authentik-oidc-provider

Commits on May 24, 2026

feat(auth): add Authentik OIDC provider for self-hosted SSO
Lynton Infra
committed
feat(auth): render Authentik sign-in button on login/signup/share pages
Lynton Infra
committed
feat(auth): CAP_DISABLE_EMAIL_AUTH env to hide magic-link UI
Lynton Infra
committed
feat(auth): hide OR divider when CAP_DISABLE_EMAIL_AUTH=true
Lynton Infra
committed
feat(auth): hide email-specific ToS line + redirect /signup when CAP_DISABLE_EMAIL_AUTH
Lynton Infra
committed
fix(auth): require AUTHENTIK_CLIENT_ID/SECRET when AUTHENTIK_ISSUER is set
Lynton Infra
committed
fix(auth): preserve callbackUrl + analytics on Authentik signin in AuthOverlay
Lynton Infra
committed