Public Pages

[perber]

Allow pages to be accessible publicly without authentication. Useful for publishing documentation or internal knowledge openly.

[perber]

Feature: Public Access to Pages (No Authentication)

Goal

Allow all wiki pages to be accessed publicly (without requiring authentication), controlled by a global configuration flag.

This feature is intended for:

• Publishing documentation externally
• Sharing internal knowledge without login (e.g., within an intranet)
• Preparing for future granular visibility settings (e.g., per page or tree)

Scope

• Introduce or respect the global environment flag: LEAFWIKI_PUBLIC_ACCESS
• When the flag is set to true:
  • All pages should be readable by unauthenticated users
  • Page routes such as /page/:slug should work without login
• Write/edit functionality must still require authentication
• No per-page or per-tree visibility configuration at this stage

Security Considerations

• Only the read access is public
• All editing, creating, or deleting must still be protected behind authentication
• Ensure no sensitive endpoints are exposed unintentionally

Implementation Notes

• The Go authentication middleware should check the LEAFWIKI_PUBLIC_ACCESS flag
• UI behavior:
  • Unauthenticated users should be able to view pages normally
  • The editor and write-related controls should be hidden or disabled for unauthenticated users