IntenseFinance/zitadel
3
0
Fork 0
mirror of https://github.com/zitadel/zitadel.git synced 2026-08-17 16:35:14 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix(login, console): replace allowUsernamePassword with allowLocalAuthentication in login, change translation in console (#11413)

Browse Source 
# Which Problems Are Solved

This PR deprecates and replaces the use of `allowUsernamePassword` with
`allowLocalAuthentication`.
It additionally disables the username on organizations that disallow
local authentication. In such a case, only IDPs are shown.

# How the Problems Are Solved

- replace `allowUsernamePassword` by `allowLocalAuthentication`
- disable username form if !allowLocalAuthentication
- translate property in console UI
This commit is contained in:
Max Peintner
2026-02-04 12:54:37 +00:00
committed by GitHub
parent 6f07b8deee
commit 38dbd4cf3e
46 changed files with 171 additions and 142 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/login/integration/integration/invite.cy.ts
+1 -1
View File
@@ -83,7 +83,7 @@ describe("verify invite", () => {
data: {
settings: {
passkeysType: 1,
allowUsernamePassword: true,
allowLocalAuthentication: true,
},
},
});
apps/login/integration/integration/login.cy.ts
+1 -1
View File
@@ -48,7 +48,7 @@ describe("login", () => {
data: {
settings: {
passkeysType: 1,
allowUsernamePassword: true,
allowLocalAuthentication: true,
},
},
});
apps/login/integration/integration/register.cy.ts
+1 -1
View File
@@ -15,7 +15,7 @@ describe("register", () => {
settings: {
passkeysType: 1,
allowRegister: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
defaultRedirectUri: "",
},
},
apps/login/locales/ar.json
+1
View File
@@ -47,6 +47,7 @@
"userNotFound": "المستخدم غير موجود في النظام",
"couldNotCreateSession": "تعذر إنشاء جلسة للمستخدم",
"initialUserNotSupported": "المستخدم الأولي غير مدعوم",
"localAuthenticationNotAllowed": "المصادقة المحلية غير مسموح بها! اتصل بالمسؤول لمزيد من المعلومات.",
"usernamePasswordNotAllowed": "اسم المستخدم وكلمة المرور غير مسموح بهما! اتصل بالمسؤول لمزيد من المعلومات.",
"passkeysNotAllowed": "مفاتيح المرور غير مسموح بها! اتصل بالمسؤول لمزيد من المعلومات.",
"couldNotFindIdentityProvider": "تعذر العثور على مزود الهوية.",
apps/login/locales/de.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Benutzer im System nicht gefunden",
"couldNotCreateSession": "Sitzung für Benutzer konnte nicht erstellt werden",
"initialUserNotSupported": "Initialer Benutzer wird nicht unterstützt",
"usernamePasswordNotAllowed": "Benutzername und Passwort nicht zulässig! Wenden Sie sich für weitere Informationen an Ihren Administrator.",
"localAuthenticationNotAllowed": "Lokale Authentifizierung nicht zulässig! Wenden Sie sich für weitere Informationen an Ihren Administrator.",
"passkeysNotAllowed": "Passkeys nicht zulässig! Wenden Sie sich für weitere Informationen an Ihren Administrator.",
"couldNotFindIdentityProvider": "Identitätsanbieter konnte nicht gefunden werden.",
"userNotActive": "Das Benutzerkonto ist inaktiv. Wenden Sie sich für weitere Informationen an Ihren Administrator."
apps/login/locales/en.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "User not found in the system",
"couldNotCreateSession": "Could not create session for user",
"initialUserNotSupported": "Initial User not supported",
"usernamePasswordNotAllowed": "Username Password not allowed! Contact your administrator for more information.",
"localAuthenticationNotAllowed": "Local authentication is not allowed! Contact your administrator for more information.",
"passkeysNotAllowed": "Passkeys not allowed! Contact your administrator for more information.",
"couldNotFindIdentityProvider": "Could not find identity provider.",
"userNotActive": "User is not active. Contact your administrator for more information."
apps/login/locales/es.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Usuario no encontrado en el sistema",
"couldNotCreateSession": "No se pudo crear la sesión para el usuario",
"initialUserNotSupported": "Usuario inicial no admitido",
"usernamePasswordNotAllowed": "El inicio de sesión con usuario y contraseña no está permitido. Contacte con su administrador para más información.",
"localAuthenticationNotAllowed": "¡La autenticación local no está permitida! Contacte con su administrador para más información.",
"passkeysNotAllowed": "Las passkeys no están permitidas. Contacte con su administrador para más información.",
"couldNotFindIdentityProvider": "No se pudo encontrar el proveedor de identidad.",
"userNotActive": "El usuario no está activo. Contacte con su administrador para más información."
apps/login/locales/fr.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Utilisateur non trouvé dans le système",
"couldNotCreateSession": "Impossible de créer une session pour l'utilisateur",
"initialUserNotSupported": "Utilisateur initial non pris en charge",
"usernamePasswordNotAllowed": "L'identifiant et le mot de passe ne sont pas autorisés ! Contactez votre administrateur pour plus d'informations.",
"localAuthenticationNotAllowed": "L'authentification locale n'est pas autorisée ! Contactez votre administrateur pour plus d'informations.",
"passkeysNotAllowed": "Les clés d'accès ne sont pas autorisées ! Contactez votre administrateur pour plus d'informations.",
"couldNotFindIdentityProvider": "Impossible de trouver le fournisseur d'identité.",
"userNotActive": "L'utilisateur n'est pas actif. Contactez votre administrateur pour plus d'informations."
apps/login/locales/it.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Utente non trovato nel sistema",
"couldNotCreateSession": "Impossibile creare la sessione per l'utente",
"initialUserNotSupported": "Utente iniziale non supportato",
"usernamePasswordNotAllowed": "Nome utente e password non consentiti! Contatta l'amministratore per maggiori informazioni.",
"localAuthenticationNotAllowed": "L'autenticazione locale non è consentita! Contatta il tuo amministratore per ulteriori informazioni.",
"passkeysNotAllowed": "Passkey non consentite! Contatta l'amministratore per maggiori informazioni.",
"couldNotFindIdentityProvider": "Impossibile trovare il provider di identità.",
"userNotActive": "L'utente non è attivo. Contatta l'amministratore per maggiori informazioni."
apps/login/locales/ja.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "ユーザーがシステムに見つかりません",
"couldNotCreateSession": "ユーザーのセッションを作成できませんでした",
"initialUserNotSupported": "初期ユーザーはサポートされていません",
"usernamePasswordNotAllowed": "ユーザー名とパスワードは許可されていません！詳細については管理者にお問い合わせください。",
"localAuthenticationNotAllowed": "ローカル認証は許可されていません！ 詳細については管理者に問い合わせてください。",
"passkeysNotAllowed": "パスキーは許可されていません！詳細については管理者にお問い合わせください。",
"couldNotFindIdentityProvider": "IDプロバイダーが見つかりませんでした。",
"userNotActive": "ユーザーはアクティブではありません。詳細については管理者にお問い合わせください。"
apps/login/locales/nl.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Gebruiker niet in het systeem gevonden",
"couldNotCreateSession": "Kon sessie voor gebruiker niet aanmaken",
"initialUserNotSupported": "Initiële gebruiker wordt niet ondersteund",
"usernamePasswordNotAllowed": "Gebruikersnaam en wachtwoord niet toegestaan! Neem contact op met jouw beheerder voor meer informatie.",
"localAuthenticationNotAllowed": "Lokale authenticatie is niet toegestaan! Neem contact op met uw beheerder voor meer informatie.",
"passkeysNotAllowed": "Passkeys niet toegestaan! Neem contact op met jouw beheerder voor meer informatie.",
"couldNotFindIdentityProvider": "Kon identiteitsprovider niet vinden.",
"userNotActive": "Gebruiker is niet actief. Neem contact op met jouw beheerder voor meer informatie."
apps/login/locales/pl.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Użytkownik nie został znaleziony w systemie",
"couldNotCreateSession": "Nie udało się utworzyć sesji dla użytkownika",
"initialUserNotSupported": "Użytkownik inicjalny nie jest obsługiwany",
"usernamePasswordNotAllowed": "Logowanie przy użyciu nazwy użytkownika i hasła jest niedozwolone! Skontaktuj się z administratorem, aby uzyskać więcej informacji.",
"localAuthenticationNotAllowed": "Uwierzytelnianie lokalne nie jest dozwolone! Skontaktuj się z administratorem, aby uzyskać więcej informacji.",
"passkeysNotAllowed": "Klucze dostępu są niedozwolone! Skontaktuj się z administratorem, aby uzyskać więcej informacji.",
"couldNotFindIdentityProvider": "Nie udało się znaleźć dostawcy tożsamości.",
"userNotActive": "Użytkownik jest nieaktywny. Skontaktuj się z administratorem, aby uzyskać więcej informacji."
apps/login/locales/ru.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Пользователь не найден в системе",
"couldNotCreateSession": "Не удалось создать сессию для пользователя",
"initialUserNotSupported": "Начальный пользователь не поддерживается",
"usernamePasswordNotAllowed": "Использование имени пользователя и пароля не разрешено! Обратитесь к администратору за дополнительной информацией.",
"localAuthenticationNotAllowed": "Локальная аутентификация запрещена! Обратитесь к администратору за дополнительной информацией.",
"passkeysNotAllowed": "Ключи доступа не разрешены! Обратитесь к администратору за дополнительной информацией.",
"couldNotFindIdentityProvider": "Не удалось найти поставщика удостоверений.",
"userNotActive": "Пользователь неактивен. Обратитесь к администратору за дополнительной информацией."
apps/login/locales/tr.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Kullanıcı sistemde bulunamadı",
"couldNotCreateSession": "Kullanıcı için oturum oluşturulamadı",
"initialUserNotSupported": "İlk kullanıcı desteklenmiyor",
"usernamePasswordNotAllowed": "Kullanıcı adı ve şifre izin verilmiyor! Daha fazla bilgi için yöneticinizle iletişime geçin.",
"localAuthenticationNotAllowed": "Yerel kimlik doğrulamasına izin verilmiyor! Daha fazla bilgi için yöneticinize başvurun.",
"passkeysNotAllowed": "Passkey'ler izin verilmiyor! Daha fazla bilgi için yöneticinizle iletişime geçin.",
"couldNotFindIdentityProvider": "Kimlik sağlayıcı bulunamadı.",
"userNotActive": "Kullanıcı aktif değil. Daha fazla bilgi için yöneticinizle iletişime geçin."
apps/login/locales/uk.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "Користувача не знайдено в системі",
"couldNotCreateSession": "Не вдалося створити сеанс для користувача",
"initialUserNotSupported": "Початковий користувач не підтримується",
"usernamePasswordNotAllowed": "Ім'я користувача та пароль не дозволені! Зверніться до адміністратора для отримання додаткової інформації.",
"localAuthenticationNotAllowed": "Локальна аутентифікація заборонена! Зверніться до адміністратора за додатковою інформацією.",
"passkeysNotAllowed": "Ключі доступу не дозволені! Зверніться до адміністратора для отримання додаткової інформації.",
"couldNotFindIdentityProvider": "Не вдалося знайти постачальника ідентичності.",
"userNotActive": "Користувач неактивний. Зверніться до адміністратора для отримання додаткової інформації."
apps/login/locales/zh.json
+1 -1
View File
@@ -47,7 +47,7 @@
"userNotFound": "系统中未找到用户",
"couldNotCreateSession": "无法为用户创建会话",
"initialUserNotSupported": "不支持初始用户",
"usernamePasswordNotAllowed": "不允许使用用户名和密码！请联系管理员了解更多信息。",
"localAuthenticationNotAllowed": "不允许本地身份验证！请联系您的管理员以获取更多信息。",
"passkeysNotAllowed": "不允许使用 Passkey！请联系管理员了解更多信息。",
"couldNotFindIdentityProvider": "找不到身份提供者。",
"userNotActive": "用户未激活。请联系管理员了解更多信息。"
apps/login/src/app/(login)/loginname/page.tsx
+3 -2
View File
@@ -57,7 +57,7 @@ export default async function Page(props: { searchParams: Promise<Record<string
</div>
<div className="w-full">
<UsernameForm
{loginSettings?.allowLocalAuthentication && <UsernameForm
loginName={loginName}
requestId={requestId}
organization={organization} // stick to "organization" as we still want to do user discovery based on the searchParams not the default organization, later the organization is determined by the found user
@@ -66,7 +66,7 @@ export default async function Page(props: { searchParams: Promise<Record<string
suffix={suffix}
submit={submit}
allowRegister={!!loginSettings?.allowRegister}
></UsernameForm>
></UsernameForm>}
{loginSettings?.allowExternalIdp && !!identityProviders?.length && (
<div className="w-full pb-4 pt-6">
@@ -75,6 +75,7 @@ export default async function Page(props: { searchParams: Promise<Record<string
requestId={requestId}
organization={organization}
postErrorRedirectUrl="/loginname"
showLabel={loginSettings?.allowLocalAuthentication}
></SignInWithIdp>
</div>
)}
apps/login/src/app/(login)/register/page.tsx
+1 -2
View File
@@ -13,7 +13,6 @@ import {
getPasswordComplexitySettings,
} from "@/lib/zitadel";
import { Organization } from "@zitadel/proto/zitadel/org/v2/org_pb";
import { PasskeysType } from "@zitadel/proto/zitadel/settings/v2/login_settings_pb";
import { Metadata } from "next";
import { getTranslations } from "next-intl/server";
import { headers } from "next/headers";
@@ -93,7 +92,7 @@ export default async function Page(props: { searchParams: Promise<Record<string
{legal &&
passwordComplexitySettings &&
organization &&
(loginSettings.allowUsernamePassword || loginSettings.passkeysType == PasskeysType.ALLOWED) && (
loginSettings.allowLocalAuthentication && (
<RegisterForm
idpCount={!loginSettings?.allowExternalIdp ? 0 : identityProviders.length}
legal={legal}
apps/login/src/app/(login)/register/password/page.tsx
+1 -1
View File
@@ -52,7 +52,7 @@ export default async function Page(props: { searchParams: Promise<Record<string
</div>
<div className="w-full"></div>
</DynamicTheme>
) : loginSettings?.allowRegister && loginSettings.allowUsernamePassword ? (
) : loginSettings?.allowRegister && loginSettings.allowLocalAuthentication ? (
<DynamicTheme branding={branding}>
<div className="flex flex-col space-y-4">
<h1>
apps/login/src/components/choose-authenticator-to-login.tsx
+3 -2
View File
@@ -20,16 +20,17 @@ export function ChooseAuthenticatorToLogin({
return (
<>
{authMethods.includes(AuthenticationMethodType.PASSWORD) &&
loginSettings?.allowUsernamePassword && (
loginSettings?.allowLocalAuthentication && (
<div className="ztdl-p">
<Translated i18nKey="chooseAlternativeMethod" namespace="idp" />
</div>
)}
<div className="grid w-full grid-cols-1 gap-5 pt-4">
{authMethods.includes(AuthenticationMethodType.PASSWORD) &&
loginSettings?.allowUsernamePassword &&
loginSettings?.allowLocalAuthentication &&
PASSWORD(false, "/password?" + params)}
{authMethods.includes(AuthenticationMethodType.PASSKEY) &&
loginSettings?.allowLocalAuthentication &&
loginSettings?.passkeysType == PasskeysType.ALLOWED &&
PASSKEYS(false, "/passkey?" + params)}
</div>
apps/login/src/components/choose-authenticator-to-setup.tsx
+1 -1
View File
@@ -21,7 +21,7 @@ export function ChooseAuthenticatorToSetup({ authMethods, params, loginSettings
return (
<div className="grid w-full grid-cols-1 gap-5 pt-4">
{!authMethods.includes(AuthenticationMethodType.PASSWORD) &&
loginSettings.allowUsernamePassword &&
loginSettings.allowLocalAuthentication &&
PASSWORD(false, "/password/set?" + params)}
{!authMethods.includes(AuthenticationMethodType.PASSKEY) &&
loginSettings.passkeysType == PasskeysType.ALLOWED &&
apps/login/src/components/register-form.tsx
+4 -4
View File
@@ -159,7 +159,7 @@ export function RegisterForm({
<PrivacyPolicyCheckboxes legal={legal} onChange={setTosAndPolicyAccepted} />
)}
{/* show chooser if both methods are allowed */}
{loginSettings && loginSettings.allowUsernamePassword && loginSettings.passkeysType == PasskeysType.ALLOWED && (
{loginSettings && loginSettings.allowLocalAuthentication && loginSettings.passkeysType == PasskeysType.ALLOWED && (
<>
<p className="ztdl-p mb-6 mt-4 block text-left">
<Translated i18nKey="selectMethod" namespace="register" />
@@ -170,7 +170,7 @@ export function RegisterForm({
</div>
</>
)}
{!loginSettings?.allowUsernamePassword &&
{!loginSettings?.allowLocalAuthentication &&
loginSettings?.passkeysType !== PasskeysType.ALLOWED &&
(!loginSettings?.allowExternalIdp || !idpCount) && (
<div className="py-4">
@@ -194,9 +194,9 @@ export function RegisterForm({
disabled={loading || !canSubmit}
onClick={handleSubmit((values) => {
const usePasswordToContinue: boolean =
loginSettings?.allowUsernamePassword && loginSettings?.passkeysType == PasskeysType.ALLOWED
loginSettings?.allowLocalAuthentication && loginSettings?.passkeysType == PasskeysType.ALLOWED
? !(selected === methods[0]) // choose selection if both available
: !!loginSettings?.allowUsernamePassword; // if password is chosen
: !!loginSettings?.allowLocalAuthentication; // if password is chosen
// set password as default if only password is allowed
return submitAndContinue(values, usePasswordToContinue);
})}
apps/login/src/lib/server/loginname.test.ts
+61 -41
View File
@@ -134,7 +134,7 @@ describe("sendLoginname", () => {
});
test("should return error when user search fails", async () => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: true });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: true });
mockSearchUsers.mockResolvedValue({ error: "Search failed" });
const result = await sendLoginname({
@@ -145,7 +145,7 @@ describe("sendLoginname", () => {
});
test("should return error when search result has no result field", async () => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: true });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: true });
mockSearchUsers.mockResolvedValue({});
const result = await sendLoginname({
@@ -156,7 +156,7 @@ describe("sendLoginname", () => {
});
test("should return error when more than one user found", async () => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: true });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: true });
mockSearchUsers.mockResolvedValue({
result: [
{ userId: "user1", preferredLoginName: "user1@example.com" },
@@ -192,7 +192,7 @@ describe("sendLoginname", () => {
};
beforeEach(() => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: true });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: true });
mockSearchUsers.mockResolvedValue({ result: [mockUser] });
mockCreate.mockReturnValue({});
mockCreateSessionAndUpdateCookie.mockResolvedValue({ session: mockSession, sessionCookie: {} });
@@ -232,7 +232,7 @@ describe("sendLoginname", () => {
});
test("should attempt IDP redirect when password is not allowed but user has IDP links", async () => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: false });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: false });
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSWORD],
});
@@ -253,7 +253,7 @@ describe("sendLoginname", () => {
});
test("should return error when password not allowed and no IDP links available", async () => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: false });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: false });
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSWORD],
});
@@ -265,12 +265,12 @@ describe("sendLoginname", () => {
});
expect(result).toEqual({
error: "errors.usernamePasswordNotAllowed",
error: "errors.localAuthenticationNotAllowed",
});
});
test("should redirect to organization IDP when password not allowed, no user IDP links, but organization has active IDP", async () => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: false });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: false });
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSWORD],
});
@@ -293,7 +293,7 @@ describe("sendLoginname", () => {
});
test("should redirect to passkey when user has only passkey method and it's allowed", async () => {
mockGetLoginSettings.mockResolvedValue({ passkeysType: PasskeysType.ALLOWED });
mockGetLoginSettings.mockResolvedValue({ passkeysType: PasskeysType.ALLOWED, allowLocalAuthentication: true });
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSKEY],
});
@@ -310,7 +310,25 @@ describe("sendLoginname", () => {
});
test("should return error when passkeys are not allowed", async () => {
mockGetLoginSettings.mockResolvedValue({ passkeysType: PasskeysType.NOT_ALLOWED });
mockGetLoginSettings.mockResolvedValue({ passkeysType: PasskeysType.NOT_ALLOWED, allowLocalAuthentication: true });
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSKEY],
});
const result = await sendLoginname({
loginName: "user@example.com",
});
expect(result).toEqual({
error: "errors.passkeysNotAllowed",
});
});
test("should return error when passkeys are allowed but allowLocalAuthentication is false", async () => {
mockGetLoginSettings.mockResolvedValue({
passkeysType: PasskeysType.ALLOWED,
allowLocalAuthentication: false,
});
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSKEY],
});
@@ -342,7 +360,7 @@ describe("sendLoginname", () => {
test("should NOT create session when ignoreUnknownUsernames is true", async () => {
mockGetLoginSettings.mockResolvedValue({
allowUsernamePassword: true,
allowLocalAuthentication: true,
ignoreUnknownUsernames: true,
});
mockListAuthenticationMethodTypes.mockResolvedValue({
@@ -377,8 +395,8 @@ describe("sendLoginname", () => {
expect((result as any).redirect).toContain("altPassword=true"); // password is allowed
});
test("should not show password alternative when password is not allowed", async () => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: false });
test("should return error when allowLocalAuthentication is false (disabling both password and passkey)", async () => {
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: false });
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSWORD, AuthenticationMethodType.PASSKEY],
});
@@ -387,9 +405,9 @@ describe("sendLoginname", () => {
loginName: "user@example.com",
});
expect(result).toBeDefined();
expect(result?.redirect).toMatch(/^\/passkey\?/);
expect(result?.redirect).toContain("altPassword=false"); // password is not allowed
expect(result).toEqual({
error: "errors.localAuthenticationNotAllowed",
});
});
test("should redirect to IDP when no passkey but IDP available", async () => {
@@ -422,7 +440,7 @@ describe("sendLoginname", () => {
});
test("should return error when password is only method in multi-method scenario but not allowed", async () => {
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: false });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: false });
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSWORD],
});
@@ -434,7 +452,7 @@ describe("sendLoginname", () => {
});
expect(result).toEqual({
error: "errors.usernamePasswordNotAllowed",
error: "errors.localAuthenticationNotAllowed",
});
});
});
@@ -448,7 +466,7 @@ describe("sendLoginname", () => {
test("should redirect to single IDP when register allowed but password not allowed", async () => {
mockGetLoginSettings.mockResolvedValue({
allowRegister: true,
allowUsernamePassword: false,
allowLocalAuthentication: false,
});
mockGetActiveIdentityProviders.mockResolvedValue({
identityProviders: [{ id: "idp123", type: "OIDC" }],
@@ -465,7 +483,7 @@ describe("sendLoginname", () => {
test("should redirect to register when both register and password allowed", async () => {
mockGetLoginSettings.mockResolvedValue({
allowRegister: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
ignoreUnknownUsernames: false,
});
@@ -504,7 +522,7 @@ describe("sendLoginname", () => {
test("should return error when user not found and no registration allowed", async () => {
mockGetLoginSettings.mockResolvedValue({
allowRegister: false,
allowUsernamePassword: true,
allowLocalAuthentication: true,
});
const result = await sendLoginname({
@@ -519,14 +537,14 @@ describe("sendLoginname", () => {
mockGetLoginSettings
.mockResolvedValueOnce({
allowRegister: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
ignoreUnknownUsernames: false,
})
// Mock login settings for discovered org - must include all necessary flags
.mockResolvedValueOnce({
allowDomainDiscovery: true,
allowRegister: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
ignoreUnknownUsernames: false,
});
@@ -559,13 +577,13 @@ describe("sendLoginname", () => {
mockGetLoginSettings
.mockResolvedValueOnce({
allowRegister: true,
allowUsernamePassword: false,
allowLocalAuthentication: false,
})
// Mock login settings for discovered org - must include all necessary flags
.mockResolvedValueOnce({
allowDomainDiscovery: true,
allowRegister: true,
allowUsernamePassword: false,
allowLocalAuthentication: false,
});
// Mock org discovery to return one org with matching domain
@@ -603,7 +621,7 @@ describe("sendLoginname", () => {
mockGetLoginSettings
.mockResolvedValueOnce({
allowRegister: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
ignoreUnknownUsernames: false,
})
// Mock login settings for org with domain discovery disabled
@@ -627,7 +645,7 @@ describe("sendLoginname", () => {
test("should not discover org if multiple orgs match the domain", async () => {
mockGetLoginSettings.mockResolvedValue({
allowRegister: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
ignoreUnknownUsernames: false,
});
@@ -651,7 +669,7 @@ describe("sendLoginname", () => {
test("should use provided organization instead of discovering when org context exists", async () => {
mockGetLoginSettings.mockResolvedValue({
allowRegister: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
ignoreUnknownUsernames: false,
});
@@ -669,11 +687,11 @@ describe("sendLoginname", () => {
expect(mockGetOrgsByDomain).not.toHaveBeenCalled();
});
test("should redirect to password when ignoreUnknownUsernames is true, allowRegister is true, but allowUsernamePassword is false (User not found)", async () => {
test("should redirect to password when ignoreUnknownUsernames is true, allowRegister is true, but allowLocalAuthentication is false (User not found)", async () => {
mockSearchUsers.mockResolvedValue({ result: [] });
mockGetLoginSettings.mockResolvedValue({
allowRegister: true,
allowUsernamePassword: false,
allowLocalAuthentication: false,
ignoreUnknownUsernames: true,
});
mockGetActiveIdentityProviders.mockResolvedValue({ identityProviders: [] });
@@ -747,7 +765,7 @@ describe("sendLoginname", () => {
});
mockGetLoginSettings.mockResolvedValue({
ignoreUnknownUsernames: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
});
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSWORD],
@@ -777,7 +795,7 @@ describe("sendLoginname", () => {
});
mockGetLoginSettings.mockResolvedValue({
ignoreUnknownUsernames: true,
allowUsernamePassword: true,
allowLocalAuthentication: true,
});
mockListAuthenticationMethodTypes.mockResolvedValue({
authMethodTypes: [AuthenticationMethodType.PASSWORD],
@@ -809,7 +827,7 @@ describe("sendLoginname", () => {
};
mockGetLoginSettings.mockResolvedValue({
allowUsernamePassword: false,
allowLocalAuthentication: false,
ignoreUnknownUsernames: true,
});
mockSearchUsers.mockResolvedValue({ result: [mockUser] });
@@ -826,7 +844,7 @@ describe("sendLoginname", () => {
ignoreUnknownUsernames: true,
});
expect(result).not.toEqual({ error: "errors.usernamePasswordNotAllowed" });
expect(result).not.toEqual({ error: "errors.localAuthenticationNotAllowed" });
expect(result).toHaveProperty("redirect");
expect((result as any).redirect).toMatch(/^\/password\?/);
});
@@ -892,7 +910,7 @@ describe("sendLoginname", () => {
},
};
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: true });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: true });
mockSearchUsers.mockResolvedValue({ result: [mockUser] });
mockCreate.mockReturnValue({});
mockCreateSessionAndUpdateCookie.mockResolvedValue({ session: mockSession, sessionCookie: {} });
@@ -923,7 +941,7 @@ describe("sendLoginname", () => {
},
};
mockGetLoginSettings.mockResolvedValue({ allowUsernamePassword: true });
mockGetLoginSettings.mockResolvedValue({ allowLocalAuthentication: true });
mockSearchUsers.mockResolvedValue({ result: [mockUser] });
mockCreate.mockReturnValue({});
mockCreateSessionAndUpdateCookie.mockResolvedValue({ session: mockSession, sessionCookie: {} });
@@ -962,7 +980,7 @@ describe("sendLoginname", () => {
};
mockGetLoginSettings.mockResolvedValue({
allowUsernamePassword: true,
allowLocalAuthentication: true,
ignoreUnknownUsernames: true,
});
// Mock search result returns a user with resolved/different loginName
@@ -1006,6 +1024,7 @@ describe("sendLoginname", () => {
mockGetLoginSettings.mockResolvedValue({
passkeysType: PasskeysType.ALLOWED,
allowLocalAuthentication: true,
ignoreUnknownUsernames: true,
});
mockSearchUsers.mockResolvedValue({ result: [mockUser] });
@@ -1047,6 +1066,7 @@ describe("sendLoginname", () => {
mockGetLoginSettings.mockResolvedValue({
passkeysType: PasskeysType.ALLOWED,
allowLocalAuthentication: true,
ignoreUnknownUsernames: true,
});
mockSearchUsers.mockResolvedValue({ result: [mockUser] });
@@ -1088,10 +1108,10 @@ describe("sendLoginname", () => {
// Mock implementation to return different settings based on organization
mockGetLoginSettings.mockImplementation(async (args: any) => {
if (args.organization === "context-org") {
return { allowUsernamePassword: true, ignoreUnknownUsernames: true };
return { allowLocalAuthentication: true, ignoreUnknownUsernames: true };
}
if (args.organization === "user-org") {
return { allowUsernamePassword: true, ignoreUnknownUsernames: false };
return { allowLocalAuthentication: true, ignoreUnknownUsernames: false };
}
return {};
});
@@ -1136,10 +1156,10 @@ describe("sendLoginname", () => {
mockGetLoginSettings.mockImplementation(async (args: any) => {
if (args.organization === "context-org") {
return { allowUsernamePassword: true, ignoreUnknownUsernames: false };
return { allowLocalAuthentication: true, ignoreUnknownUsernames: false };
}
if (args.organization === "user-org") {
return { allowUsernamePassword: true, ignoreUnknownUsernames: true };
return { allowLocalAuthentication: true, ignoreUnknownUsernames: true };
}
return {};
});
apps/login/src/lib/server/loginname.ts
+16 -9
View File
@@ -336,7 +336,7 @@ export async function sendLoginname(command: SendLoginnameCommand) {
const method = methods.authMethodTypes[0];
switch (method) {
case AuthenticationMethodType.PASSWORD: // user has only password as auth method
if (!userLoginSettings?.allowUsernamePassword) {
if (!userLoginSettings?.allowLocalAuthentication) {
// Check if user has IDPs available as alternative, that could eventually be used to register/link.
const idpResp = await redirectUserToIDP(userId, organization);
if (idpResp?.redirect) {
@@ -348,7 +348,7 @@ export async function sendLoginname(command: SendLoginnameCommand) {
}
return {
error: t("errors.usernamePasswordNotAllowed"),
error: t("errors.localAuthenticationNotAllowed"),
};
}
@@ -371,7 +371,10 @@ export async function sendLoginname(command: SendLoginnameCommand) {
};
case AuthenticationMethodType.PASSKEY: // AuthenticationMethodType.AUTHENTICATION_METHOD_TYPE_PASSKEY
if (userLoginSettings?.passkeysType === PasskeysType.NOT_ALLOWED) {
if (
userLoginSettings?.passkeysType === PasskeysType.NOT_ALLOWED ||
!userLoginSettings?.allowLocalAuthentication
) {
if (command.ignoreUnknownUsernames) {
return preventUserEnumeration(command.organization);
}
@@ -406,12 +409,16 @@ export async function sendLoginname(command: SendLoginnameCommand) {
}
} else {
// prefer passkey in favor of other methods
if (methods.authMethodTypes.includes(AuthenticationMethodType.PASSKEY)) {
if (
methods.authMethodTypes.includes(AuthenticationMethodType.PASSKEY) &&
userLoginSettings?.passkeysType !== PasskeysType.NOT_ALLOWED &&
userLoginSettings?.allowLocalAuthentication
) {
const passkeyParams = new URLSearchParams({
loginName: command.ignoreUnknownUsernames
? command.loginName
: (session?.factors?.user?.loginName ?? user.preferredLoginName),
altPassword: `${methods.authMethodTypes.includes(AuthenticationMethodType.PASSWORD) && userLoginSettings?.allowUsernamePassword}`, // show alternative password option only if allowed
altPassword: `${methods.authMethodTypes.includes(AuthenticationMethodType.PASSWORD) && userLoginSettings?.allowLocalAuthentication}`, // show alternative password option only if allowed
});
if (command.requestId) {
@@ -427,12 +434,12 @@ export async function sendLoginname(command: SendLoginnameCommand) {
return redirectUserToIDP(userId, organization);
} else if (methods.authMethodTypes.includes(AuthenticationMethodType.PASSWORD)) {
// Check if password authentication is allowed
if (!userLoginSettings?.allowUsernamePassword) {
if (!userLoginSettings?.allowLocalAuthentication) {
if (command.ignoreUnknownUsernames) {
return preventUserEnumeration(command.organization);
}
return {
error: "Username Password not allowed! Contact your administrator for more information.",
error: t("errors.localAuthenticationNotAllowed"),
};
}
@@ -497,7 +504,7 @@ export async function sendLoginname(command: SendLoginnameCommand) {
}
// user not found, check if register is enabled on instance / organization context
if (effectiveLoginSettings?.allowRegister && !effectiveLoginSettings?.allowUsernamePassword) {
if (effectiveLoginSettings?.allowRegister && !effectiveLoginSettings?.allowLocalAuthentication) {
console.log("redirecting to IDP (register allowed, password not allowed)");
const resp = await redirectUserToIDP(undefined, discoveredOrganization);
if (resp) {
@@ -506,7 +513,7 @@ export async function sendLoginname(command: SendLoginnameCommand) {
console.log("IDP redirect failed, returning user not found");
return preventUserEnumeration(discoveredOrganization);
} else if (effectiveLoginSettings?.allowRegister && effectiveLoginSettings?.allowUsernamePassword) {
} else if (effectiveLoginSettings?.allowRegister && effectiveLoginSettings?.allowLocalAuthentication) {
console.log("register and password both allowed");
// do not register user if ignoreUnknownUsernames is set
if (discoveredOrganization && !effectiveLoginSettings?.ignoreUnknownUsernames) {
console/src/app/modules/policies/login-policy/login-policy.component.html
+2 -2
View File
@@ -229,7 +229,7 @@
<mat-checkbox
class="login-policy-toggle"
color="primary"
matTooltip="{{ 'DESCRIPTIONS.SETTINGS.LOGIN.FORM.USERNAME_PASSWORD_ALLOWED.DESCRIPTION' | translate }}"
matTooltip="{{ 'DESCRIPTIONS.SETTINGS.LOGIN.FORM.LOCAL_AUTHENTICATION_ALLOWED.DESCRIPTION' | translate }}"
ngDefaultControl
[(ngModel)]="loginData.allowUsernamePassword"
[disabled]="
@@ -244,7 +244,7 @@
| async) === false
"
>
{{ 'DESCRIPTIONS.SETTINGS.LOGIN.FORM.USERNAME_PASSWORD_ALLOWED.TITLE' | translate }}
{{ 'DESCRIPTIONS.SETTINGS.LOGIN.FORM.LOCAL_AUTHENTICATION_ALLOWED.TITLE' | translate }}
</mat-checkbox>
<!-- <cnsl-info-section class="info">
console/src/assets/i18n/bg.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Форма за Вход",
"DESCRIPTION": "Персонализирайте формата за вход.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Разрешено е използването на потребителско име и парола",
"DESCRIPTION": "Позволете на вашите потребители да влизат с тяхното потребителско име и парола. Ако това е деактивирано, вашите потребители могат да влизат само чрез автентикация без парола или с външен доставчик на идентичност."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Разрешено е локално удостоверяване",
"DESCRIPTION": "Позволете на потребителите си да влизат с потребителско име и парола или удостоверяване с passkey. Ако това е деактивирано, потребителите ви могат да влизат само чрез външен доставчик на идентичност."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Разрешена е регистрация на потребители",
console/src/assets/i18n/cs.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Přihlašovací formulář",
"DESCRIPTION": "Přizpůsob si přihlašovací formulář.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Povoleno přihlášení pomocí uživatelského jména a hesla",
"DESCRIPTION": "Umožni svým uživatelům přihlásit se pomocí uživatelského jména a hesla. Pokud je tato možnost deaktivována, tvoji uživatelé se mohou přihlásit pouze pomocí autentizace pomocí passkey nebo pomocí externího poskytovatele identity."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Místní ověření povoleno",
"DESCRIPTION": "Umožněte uživatelům přihlásit se pomocí uživatelského jména a hesla nebo ověření pomocí přístupového klíče (passkey). Pokud je tato možnost deaktivována, uživatelé se mohou přihlásit pouze pomocí externího poskytovatele identity."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Povolena registrace uživatelů",
console/src/assets/i18n/de.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Login-Formular",
"DESCRIPTION": "Passe das Login-Formular an.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Benutzername und Passwort erlaubt",
"DESCRIPTION": "Erlaube deinen Benutzern, sich mit ihrem Benutzernamen und Passwort einzuloggen. Ist dies deaktiviert, können sich deine Benutzer nur mit Passkey Authentifizierung oder einem externen Identitätsanbieter einloggen."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Lokale Authentifizierung erlaubt",
"DESCRIPTION": "Erlauben Sie Ihren Benutzern, sich mit ihrem Benutzernamen und Passwort oder per Passkey-Authentifizierung anzumelden. Wenn dies deaktiviert ist, können sich Ihre Benutzer nur über einen externen Identitätsanbieter anmelden."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Benutzerregistrierung erlaubt",
console/src/assets/i18n/en.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Login Form",
"DESCRIPTION": "Customize the login form.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Username and Password allowed",
"DESCRIPTION": "Allow your users to log in with their username and password. If this is deactivated, your users can only log in using passkey authentication or with an external identity provider."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Local authentication allowed",
"DESCRIPTION": "Allow your users to log in with their username and password or passkey authentication. If this is deactivated, your users can only log in using an external identity provider."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "User Registration allowed",
console/src/assets/i18n/es.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Formulario de Inicio de Sesión",
"DESCRIPTION": "Personaliza el formulario de inicio de sesión.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Permitido Nombre de Usuario y Contraseña",
"DESCRIPTION": "Permite a tus usuarios iniciar sesión con su nombre de usuario y contraseña. Si esto está desactivado, tus usuarios solo pueden iniciar sesión utilizando llaves de acceso o con un proveedor de identidad externo."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Autenticación local permitida",
"DESCRIPTION": "Permita que sus usuarios inicien sesión con su nombre de usuario y contraseña o autenticación con passkey. Si esto se desactiva, sus usuarios solo podrán iniciar sesión utilizando un proveedor de identidad externo."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Permitida la Registración de Usuarios",
console/src/assets/i18n/fr.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Formulaire de connexion",
"DESCRIPTION": "Personnalisez le formulaire de connexion",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Nom d'utilisateur et mot de passe autorisés",
"DESCRIPTION": "Autorisez vos utilisateurs à se connecter avec leur nom d'utilisateur et mot de passe. Si désactivé, vos utilisateurs pourront uniquement se connecter avec une clé d'accès ou avec un fournisseur d'identité externe"
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Authentification locale autorisée",
"DESCRIPTION": "Autorisez vos utilisateurs à se connecter avec leur nom d'utilisateur et leur mot de passe ou via l'authentification par passkey. Si cette option est désactivée, vos utilisateurs ne pourront se connecter qu'en utilisant un fournisseur d'identité externe."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Enregistrement de nouveaux utilisateurs autorisé",
console/src/assets/i18n/hu.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Bejelentkező űrlap",
"DESCRIPTION": "Szabd testre a bejelentkező űrlapot.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Felhasználónév és jelszó engedélyezve",
"DESCRIPTION": "Engedd meg a felhasználóidnak, hogy felhasználónévvel és jelszóval jelentkezzenek be. Ha ez nincs engedélyezve, a felhasználóid csak Passkey azonosítással vagy külső identitásszolgáltatóval tudnak bejelentkezni."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Helyi hitelesítés engedélyezve",
"DESCRIPTION": "Engedélyezze a felhasználók számára a bejelentkezést felhasználónévvel és jelszóval vagy jelkulcsos hitelesítéssel. Ha ez ki van kapcsolva, a felhasználók csak külső személyazonosság-szolgáltatón keresztül jelentkezhetnek be."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Felhasználói regisztráció engedélyezve",
console/src/assets/i18n/id.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Formulir Masuk",
"DESCRIPTION": "Sesuaikan formulir login.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Nama Pengguna dan Kata Sandi diperbolehkan",
"DESCRIPTION": "Izinkan pengguna Anda untuk masuk dengan nama pengguna dan kata sandi mereka. Jika ini dinonaktifkan, pengguna Anda hanya dapat masuk menggunakan autentikasi tanpa kata sandi atau dengan penyedia identitas eksternal."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Otentikasi lokal diizinkan",
"DESCRIPTION": "Izinkan pengguna Anda untuk masuk dengan nama pengguna dan kata sandi atau autentikasi passkey. Jika ini dinonaktifkan, pengguna Anda hanya dapat masuk menggunakan penyedia identitas eksternal."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Pendaftaran Pengguna diperbolehkan",
console/src/assets/i18n/it.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Modulo di Login",
"DESCRIPTION": "Personalizza il modulo di login.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Username e Password consentiti",
"DESCRIPTION": "Permetti ai tuoi utenti di accedere con il loro username e password. Se questa opzione è disattivata, i tuoi utenti possono accedere solo utilizzando l'autenticazione con passkey o con un provider di identità esterno."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Autenticazione locale consentita",
"DESCRIPTION": "Consenti ai tuoi utenti di accedere con nome utente e password o autenticazione passkey. Se disattivato, i tuoi utenti potranno accedere solo utilizzando un provider di identità esterno."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Registrazione Utente consentita",
console/src/assets/i18n/ja.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "ログインフォーム",
"DESCRIPTION": "ログインフォームをカスタマイズします。",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "ユーザー名とパスワードが許可",
"DESCRIPTION": "ユーザーがユーザー名とパスワードでログインできるようにします。これが無効になっている場合、ユーザーはパスキー認証または外部IDプロバイダーを使用してのみログインできます。"
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "ローカル認証を許可",
"DESCRIPTION": "ユーザーがユーザー名とパスワード、またはパスキー認証でログインできるようにします。これが無効になっている場合、ユーザーは外部IDプロバイダーを使用してのみログインできます。"
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "ユーザー登録が許可",
console/src/assets/i18n/ko.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "로그인 폼",
"DESCRIPTION": "로그인 폼을 사용자 정의하세요.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "사용자 이름과 비밀번호 허용",
"DESCRIPTION": "사용자가 사용자 이름과 비밀번호로 로그인할 수 있도록 허용하세요. 비활성화하면 비밀번호 없는 인증 또는 외부 ID 제공자로만 로그인할 수 있습니다."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "로컬 인증 허용",
"DESCRIPTION": "사용자가 사용자 이름과 비밀번호 또는 패스키 인증으로 로그인할 수 있도록 허용합니다. 이 기능이 비활성화되면 사용자는 외부 ID 제공업체를 통해서만 로그인할 수 있습니다."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "사용자 등록 허용",
console/src/assets/i18n/mk.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Формулар за најава",
"DESCRIPTION": "Прилагодете го формуларот за најава.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Дозволено корисничко име и лозинка",
"DESCRIPTION": "Овозможете на вашите корисници да се најават со нивното корисничко име и лозинка. Ако ова е деактивирано, вашите корисници можат да се најават само со аутентикација без лозинка или со надворешен провајдер на идентитет."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Дозволена локална автентикација",
"DESCRIPTION": "Дозволете им на вашите корисници да се најават со нивното корисничко име и лозинка или со автентикација преку passkey. Ако ова е деактивирано, вашите корисници ќе можат да се најават само преку надворешен провајдер на идентитет."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Дозволена регистрација на корисници",
console/src/assets/i18n/nl.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Inlogformulier",
"DESCRIPTION": "Pas het inlogformulier aan.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Gebruikersnaam en wachtwoord toegestaan",
"DESCRIPTION": "Sta je gebruikers toe om in te loggen met hun gebruikersnaam en wachtwoord. Als dit is gedeactiveerd, kunnen je gebruikers alleen inloggen met wachtwoordloze authenticatie of met een externe identiteitsprovider."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Lokale authenticatie toegestaan",
"DESCRIPTION": "Sta uw gebruikers toe in te loggen met hun gebruikersnaam en wachtwoord of via passkey-authenticatie. Als dit is uitgeschakeld, kunnen uw gebruikers alleen inloggen via een externe identiteitsprovider."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Gebruikersregistratie toegestaan",
console/src/assets/i18n/pl.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Formularz Logowania",
"DESCRIPTION": "Dostosuj formularz logowania.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Dozwolone użytkownik i hasło",
"DESCRIPTION": "Pozwól swoim użytkownikom logować się za pomocą nazwy użytkownika i hasła. Jeśli to zostanie dezaktywowane, użytkownicy mogą logować się tylko za pomocą uwierzytelniania bez hasła lub z zewnętrznym dostawcą tożsamości."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Lokalne uwierzytelnianie dozwolone",
"DESCRIPTION": "Zezwól użytkownikom na logowanie za pomocą nazwy użytkownika i hasła lub uwierzytelniania passkey. Jeśli ta opcja jest wyłączona, użytkownicy mogą logować się tylko za pomocą zewnętrznego dostawcy tożsamości."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Dozwolona rejestracja użytkownika",
console/src/assets/i18n/pt.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Formulário de Login",
"DESCRIPTION": "Personalize o formulário de login.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Usuário e Senha permitidos",
"DESCRIPTION": "Permite que seus usuários façam login com seu nome de usuário e senha. Se isto for desativado, seus usuários só poderão fazer login usando autenticação sem senha ou com um provedor de identidade externo."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Autenticação local permitida",
"DESCRIPTION": "Permita que os seus utilizadores iniciem sessão com o seu nome de utilizador e palavra-passe ou autenticação por passkey. Se isto for desativado, os seus utilizadores apenas poderão iniciar sessão utilizando um fornecedor de identidade externo."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Registro de Usuário permitido",
console/src/assets/i18n/ro.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Formular de autentificare",
"DESCRIPTION": "Personalizați formularul de autentificare.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Nume de utilizator și parolă permise",
"DESCRIPTION": "Permiteți utilizatorilor dvs. să se conecteze cu numele lor de utilizator și parola. Dacă acest lucru este dezactivat, utilizatorii dvs. se pot conecta numai utilizând autentificarea Passkey sau cu un furnizor de identitate extern."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Autentificare locală permisă",
"DESCRIPTION": "Permiteți utilizatorilor să se autentifice cu numele de utilizator și parola sau prin autentificare cu passkey. Dacă aceasta este dezactivată, utilizatorii se pot autentifica doar folosind un furnizor de identitate extern."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Înregistrarea utilizatorilor permisă",
console/src/assets/i18n/ru.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Форма входа",
"DESCRIPTION": "Настройка формы входа.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Разрешен вход с именем пользователя и паролем",
"DESCRIPTION": "Разрешить пользователям входить с использованием имени пользователя и пароля. Если это отключено, ваши пользователи смогут входить только с использованием беспарольной аутентификации или через внешнего поставщика идентификации."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Разрешена локальная аутентификация",
"DESCRIPTION": "Разрешите пользователям входить в систему с помощью имени пользователя и пароля или аутентификации по ключу доступа (passkey). Если эта опция отключена, пользователи смогут войти только через внешнего поставщика удостоверений."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Разрешена регистрация пользователей",
console/src/assets/i18n/sv.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Inloggningsformulär",
"DESCRIPTION": "Anpassa inloggningsformuläret.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Användarnamn och lösenord tillåtet",
"DESCRIPTION": "Tillåt dina användare att logga in med sitt användarnamn och lösenord. Om detta är inaktiverat, kan dina användare endast logga in med Passkey autentisering eller med en extern identitetsleverantör."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Lokal autentisering tillåten",
"DESCRIPTION": "Tillåt dina användare att logga in med sitt användarnamn och lösenord eller nyckelautentisering (passkey). Om detta är inaktiverat kan dina användare endast logga in med en extern identitetsleverantör."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Användarregistrering tillåten",
console/src/assets/i18n/tr.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Giriş Formu",
"DESCRIPTION": "Giriş formunu özelleştirin.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Kullanıcı adı ve Şifreye izin verildi",
"DESCRIPTION": "Kullanıcılarınızın kullanıcı adı ve şifreleriyle giriş yapmalarına izin verin. Bu devre dışı bırakılırsa, kullanıcılarınız yalnızca şifresiz kimlik doğrulama veya harici kimlik sağlayıcısı kullanarak giriş yapabilir."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Yerel kimlik doğrulamaya izin verildi",
"DESCRIPTION": "Kullanıcılarınızın kullanıcı adı ve şifre veya geçiş anahtarı (passkey) kimlik doğrulaması ile oturum açmasına izin verin. Bu devre dışı bırakılırsa, kullanıcılarınız yalnızca harici bir kimlik sağlayıcı kullanarak oturum açabilir."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Kullanıcı Kaydına izin verildi",
console/src/assets/i18n/uk.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "Форма входу",
"DESCRIPTION": "Налаштуйте форму входу.",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "Дозволено ім'я користувача та пароль",
"DESCRIPTION": "Дозволити вашим користувачам входити з їх іменем користувача та паролем. Якщо це деактивовано, ваші користувачі можуть входити лише за допомогою автентифікації без пароля або з зовнішнім постачальником ідентичності."
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "Дозволена локальна автентифікація",
"DESCRIPTION": "Дозвольте користувачам входити за допомогою імені користувача та пароля або автентифікації за ключем доступу (passkey). Якщо цю опцію вимкнено, користувачі зможуть увійти лише через зовнішнього постачальника ідентифікації."
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "Дозволена реєстрація користувача",
console/src/assets/i18n/zh.json
+3 -3
View File
@@ -281,9 +281,9 @@
"FORM": {
"TITLE": "登录表单",
"DESCRIPTION": "自定义登录表单。",
"USERNAME_PASSWORD_ALLOWED": {
"TITLE": "允许用户名和密码",
"DESCRIPTION": "允许用户使用他们的用户名和密码登录。如果此功能被禁用，你的用户只能使用Passkey认证或外部身份提供者登录。"
"LOCAL_AUTHENTICATION_ALLOWED": {
"TITLE": "允许本地身份验证",
"DESCRIPTION": "允许您的用户使用其用户名和密码或通行密钥身份验证登录。如果停用此选项，您的用户只能使用外部身份提供商登录。"
},
"USER_REGISTRATION_ALLOWED": {
"TITLE": "允许用户注册",