Auto login or disable login?

[cysec404]

Hi, I'm really enjoying this app, it's super user friendly and easy to use so I think my family will finally adopt it as a central repository for all our recipes.

Is there a way to not require a login and retain the same functionality of a logged in user? This is only accessible in my home network. For my family to use and adopt it like I want them to, I need to remove the need to login. I would like any of them to be able to pull up the page and start using it, whether just reading a recipe or entering a new one.

Thanks so much!

[hay-kot]

Currently there is no plan for this. Managing some sort of switch to allow users to turn on/off login is too much for me to maintain long term. In the future, I'll be adding an environmental variable to set token timeouts. Then you could have your family login once and then set an arbitrary long token time so they only have to re-login every once in a while.

[Christoph-87]

@Northguy Yes, I also think that OpenID Connect would be the best. But I will not be able to contribute anything for this, because I do not know exactly how this works. Does OpenID Connect already work with Authelia since I see from the documentation that it is still in beta? https://www.authelia.com/docs/configuration/identity-providers/oidc.html

[Northguy]

@Christoph-87 yes, it is functional but not out of Beta stage yet. As you can see in that table, there are still enhancements to be made. For non-production use in a home environment it is perfectly useable though. And as said: I have it working with Bookstack and planning to integrate it with some other apps in near future.

[tekchip]

Would GRC's SQRL be a solution here? https://www.grc.com/sqrl/sqrl.htm If i'm missing the goal or the point here I apologize.

[BobWs]

How to use / setup OAuth2 ? I can't find any documentation about it.
Love your app by the way, testing it at the moment and compering it with Tandoor/Recipes. But at first sight I do prefer your way of setup and ease...

[hay-kot]

@BobWs OAuth2 isn't currently supported.

Not something that's on my radar, but happy to accept a Pull Request that provides this functionality.

[virtux]

Hi @hay-kot, in 2024 is it possible disable login or a workaround (token-time, define safe network, autologin...)
For home users, it would be helpful to allow the family to add recipes without remembering and logging in each time.

Thanks!
ps great job with the software!

[boc-the-git]

@virtux in 2024 security is more important than ever!

There is an environment variable TOKEN_TIME to set the number of hours a session lasts for. Give that a go, and see if it works for you 😄
https://nightly.mealie.io/documentation/getting-started/installation/backend-config/

[Prekzz]

On the same note as the TOKEN_TIME parameter. Is it possible to just completely run it internally, especially without the use of HTTPS/SSL. And still can copy things from my shopping list?

[hay-kot]

No, this is a browser limitation and not something we can do anything about.

[dimxyp]

I honestly don’t understand why this feature isn’t enabled in the app...
What are we afraid of — that someone will steal your pie recipe?
I have 3 people using it for family purposes, and no matter what I do with the token_time, it still asks for a password.
And since everyone gets annoyed, no one ends up using it at all...
I really don’t see the point of authentication in this kind of app, especially when you can run it only on your internal network.

[hay-kot]

We didn't use to have auth. The number one request from users was auth. You're in the minority here.

If token time isn't working it's possible your browser is configured to delete data and cookies when it closes. I would check that.

[dimxyp]

Okay, I understand that some might want authentication, perhaps using it in professional environments, as the code is remarkably valuable and might be integrated into their work. (and maybe they expose mealie to internet) However, it would be nice to have an option in the settings to enable, for example, home-based use and be a tool for the whole family without login page.

Just so you know, I have a tablet with Home Assistant with tab always open with Mealie in the kitchen, with over 150 recipes. I constantly get complains that it asks for a password, and they can't view the recipes.
after a while they just open old recipe book instead :)

[michael-genson]

I constantly get complains that it asks for a password

If you have to sign in more than once, something is configured wrong on your end. That's what the TOKEN_TIME variable is for.

Also, if you're using it for reading recipes only, you can configure Mealie to be browsable without a login. Login is only required for user actions

[dimxyp]

whouou I didn't know that!! I will configure that.. i dont need modification of my data most of the time

thanks a lot @michael-genson

[michael-genson]

No problem! More info in the docs: https://docs.mealie.io/documentation/getting-started/usage/permissions-and-public-access/