feat(auth): add support for access token login configuration and handling

.env.example

@@ -20,6 +20,10 @@ ROOT_URL=https://<your_domain>
 # Enable social login (Google, OIDC, etc.)
 # ENABLE_FEATURE_SOCIAL_LOGIN=true
 
+# Enable access token login (anonymous login)
+# Set to false to disable login by access token when using OAuth providers
+ENABLE_ACCESS_TOKEN_LOGIN=true
+
 # OIDC AUTHENTICATION (Optional)
 # Enable/disable OIDC authentication
 OIDC_ENABLED=false

apps/api/src/app/info/info.service.ts

@@ -128,7 +128,11 @@ export class InfoService {
       this.subscriptionService.getSubscriptionOffer({ key: 'default' })
     ]);
 
-    if (isUserSignupEnabled) {
+    const isAccessTokenLoginEnabled = this.configurationService.get(
+      'ENABLE_ACCESS_TOKEN_LOGIN'
+    );
+
+    if (isUserSignupEnabled && isAccessTokenLoginEnabled) {
       globalPermissions.push(permissions.createUserAccount);
     }
 
@@ -137,6 +141,7 @@ export class InfoService {
       benchmarks,
       demoAuthToken,
       globalPermissions,
+      isAccessTokenLoginEnabled,
       isReadOnlyMode,
       platforms,
       statistics,

apps/api/src/app/user/user.controller.ts

@@ -126,6 +126,17 @@ export class UserController {
       );
     }
 
+    const isAccessTokenLoginEnabled = this.configurationService.get(
+      'ENABLE_ACCESS_TOKEN_LOGIN'
+    );
+
+    if (!isAccessTokenLoginEnabled) {
+      throw new HttpException(
+        getReasonPhrase(StatusCodes.FORBIDDEN),
+        StatusCodes.FORBIDDEN
+      );
+    }
+
     const hasAdmin = await this.userService.hasAdmin();
 
     const { accessToken, id, role } = await this.userService.createUser({

apps/api/src/services/configuration/configuration.service.ts

@@ -40,6 +40,7 @@ export class ConfigurationService {
       DATA_SOURCES_GHOSTFOLIO_DATA_PROVIDER: json({
         default: []
       }),
+      ENABLE_ACCESS_TOKEN_LOGIN: bool({ default: true }),
       ENABLE_FEATURE_FEAR_AND_GREED_INDEX: bool({ default: false }),
       ENABLE_FEATURE_READ_ONLY_MODE: bool({ default: false }),
       ENABLE_FEATURE_SOCIAL_LOGIN: bool({ default: false }),

apps/api/src/services/interfaces/environment.interface.ts

@@ -16,6 +16,7 @@ export interface Environment extends CleanedEnvAccessors {
   DATA_SOURCE_IMPORT: string;
   DATA_SOURCES: string[];
   DATA_SOURCES_GHOSTFOLIO_DATA_PROVIDER: string[];
+  ENABLE_ACCESS_TOKEN_LOGIN: boolean;
   ENABLE_FEATURE_FEAR_AND_GREED_INDEX: boolean;
   ENABLE_FEATURE_READ_ONLY_MODE: boolean;
   ENABLE_FEATURE_SOCIAL_LOGIN: boolean;

apps/client/src/app/components/header/header.component.ts

@@ -280,6 +280,7 @@ export class GfHeaderComponent implements OnChanges {
       data: {
         accessToken: '',
         hasPermissionToUseSocialLogin: this.hasPermissionForSocialLogin,
+        isAccessTokenLoginEnabled: this.info?.isAccessTokenLoginEnabled,
         socialLoginProviders: this.info?.socialLoginProviders,
         title: $localize`Sign in`
       },

apps/client/src/app/components/login-with-access-token-dialog/interfaces/interfaces.ts

@@ -1,6 +1,7 @@
 export interface LoginWithAccessTokenDialogParams {
   accessToken: string;
   hasPermissionToUseSocialLogin: boolean;
+  isAccessTokenLoginEnabled?: boolean;
   socialLoginProviders?: string[];
   title: string;
 }

apps/client/src/app/components/login-with-access-token-dialog/login-with-access-token-dialog.html

@@ -3,6 +3,7 @@
 <div class="py-3" mat-dialog-content>
   <div class="align-items-center d-flex flex-column">
     <form class="w-100">
+      @if (data.isAccessTokenLoginEnabled !== false) {
         <mat-form-field appearance="outline" class="without-hint w-100">
           <mat-label i18n>Security Token</mat-label>
           <input
@@ -22,9 +23,12 @@
             />
           </button>
         </mat-form-field>
+      }
 
       @if (data.hasPermissionToUseSocialLogin) {
+        @if (data.isAccessTokenLoginEnabled !== false) {
           <div class="my-3 text-center text-muted" i18n>or</div>
+        }
         <div class="d-flex flex-column gap-2">
           @if (data.socialLoginProviders?.includes('google')) {
             <a
@@ -59,6 +63,7 @@
       >Stay signed in</mat-checkbox
     >
   </div>
+  @if (data.isAccessTokenLoginEnabled !== false) {
     <div>
       <button
         color="primary"
@@ -71,4 +76,5 @@
         <ng-container i18n>Sign in</ng-container>
       </button>
     </div>
+  }
 </div>

libs/common/src/lib/interfaces/info-item.interface.ts

@@ -11,6 +11,7 @@ export interface InfoItem {
   demoAuthToken: string;
   fearAndGreedDataSource?: string;
   globalPermissions: string[];
+  isAccessTokenLoginEnabled?: boolean;
   isDataGatheringEnabled?: string;
   isReadOnlyMode?: boolean;
   platforms: Platform[];