Skip to content

[6.x] Add an option to disable front-end authentication - #15507

Closed
duncanmcclean wants to merge 1017 commits into
6.xfrom
disable-frontend-auth
Closed

duncanmcclean wants to merge 1017 commits into
6.xfrom
disable-frontend-auth

Conversation

@duncanmcclean

Copy link
Copy Markdown
Member

This pull request implements a statamic.users.frontend_auth_enabled config option for applications that handle front-end authentication themselves, such as a custom login flow with two-factor authentication.

Set frontend_auth_enabled to false in config/statamic/users.php to make Statamic's front-end authentication routes return a 404. Related user tags throw a FrontendAuthenticationDisabledException. The option defaults to true.

Control Panel authentication and account activation remain available. OAuth continues to use its own configuration.

Tested with ./vendor/bin/phpunit tests/Tags/User (246 passing tests). Pint passes.

jaygeorge and others added 30 commits June 4, 2026 20:53
…ype. The builder wraps it in Fallback, but was sending fieldtype: "fallback" back on save. The repository can't look up "fallback" as a real type, so validation blows up.
…ding, paragraph) had their own collapsed markup that skipped the shared compressed-view structure.
…nge and the category feels pretty different to choice
…m fieldtype. The builder wraps it in Fallback, but was sending fieldtype: "fallback" back on save. The repository can't look up "fallback" as a real type, so validation blows up."

This reverts commit 1e759d5.
duncanmcclean and others added 26 commits August 18, 2026 09:53
…15276)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
…15332)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
merging 6.x into forms-2 kept the rewritten `Condition.vue` wholesale, which
dropped the change from #14593 that stopped excluding fields already used in
another condition. the exclusion lived in the shared `Condition` component, so
it blocked field conditions, form field logic and page rules alike.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Sy7LsNJGjpwE2ZNr8BphpQ
…lected site (#15350)

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
The form builder already keeps fieldtype icons separate from field config. Remove the remaining backend filter so manually added icon values are preserved like other custom config keys.

Add regression coverage for custom icon values and fieldtypes with an `icon` config field.
# Conflicts:
#	lang/en/messages.php
Forms 2 deleted the legacy text fieldtype's front-end views without
porting the autocomplete attribute to the generic fallback views that
now render it. The user blueprint still declares name/email as type
text with autocomplete defaults, so those inputs were silently
dropping autocomplete on user:profile_form and user:register_form.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@duncanmcclean
duncanmcclean changed the base branch from forms-2 to 6.x September 23, 2026 11:17
@duncanmcclean
duncanmcclean deleted the disable-frontend-auth branch September 23, 2026 11:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants