Don't show no-auth when WebAuthn credentials are enrolled

syncthing · Oct 15, 2023 · 42fc63b · 42fc63b
1 parent 530cb4a
commit 42fc63b
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/gui/default/index.html b/gui/default/index.html
@@ -155,9 +155,9 @@ <h3 class="panel-title">
             </div>
             <div class="panel-body">
               <p>
-              <span translate>The Syncthing admin interface is configured to allow remote access without a password.</span>
+              <span translate>The Syncthing admin interface is configured to allow remote access without authentication.</span>
               <b><span translate>This can easily give hackers access to read and change any files on your computer.</span></b>
-              <span translate>Please set a GUI Authentication User and Password in the Settings dialog.</span>
+              <span translate>Please set a GUI Authentication User and Password in the Settings dialog, or enroll a WebAuthn credential.</span>
               </p>
             </div>
             <div class="panel-footer">

diff --git a/gui/default/syncthing/core/syncthingController.js b/gui/default/syncthing/core/syncthingController.js
@@ -588,7 +588,10 @@ angular.module('syncthing.core')
             // This function should match IsAuthEnabled() in guiconfiguration.go
             var guiCfg = $scope.config && $scope.config.gui;
             if (guiCfg) {
-                return guiCfg.authMode === 'ldap' || (guiCfg.user && guiCfg.password);
+                return (guiCfg.authMode === 'ldap'
+                    || (guiCfg.user && guiCfg.password)
+                    || (guiCfg.webauthnCredentials || []).length > 0
+                );
             }
             return false;
         };