[BUG] Cannot disable password login when OIDC is configured via environment variables

[jozefrebjak]

Title

Cannot disable password login when OIDC is configured via environment variables

Platform

Web-app (Docker)

Is it related to an issue?

When OIDC is configured via environment variables (OIDC_CLIENT_ID, OIDC_CLIENT_SECRET, OIDC_ISSUER_URL, etc.) in docker-compose.yml, OIDC login works correctly — users can authenticate via Microsoft Entra ID (Azure AD).

However, when trying to disable password login in Admin Settings, Termix shows the error:

Cannot disable password login without OIDC configured! You must configure OIDC authentication before disabling password login, or you will lose access to Termix.

It seems Termix only checks the Admin Settings UI for OIDC configuration and does not detect OIDC configured via environment variables.

The Solution

Termix should detect OIDC configuration from environment variables when determining whether it is safe to disable password login. If OIDC is working (regardless of configuration method), disabling password login should be allowed.

Alternatively, provide an environment variable like LOCAL_AUTH_ENABLED=false or PASSWORD_LOGIN_ENABLED=false to disable password login via docker-compose.

Additional Context

• Termix version: 2.0.0
• OIDC Provider: Microsoft Entra ID (Azure AD), Single Tenant
• Deployment: Docker Compose with Traefik reverse proxy