feat: Authentication can be optionally disabled

env.js

@@ -24,20 +24,24 @@ const PLUGINS_MODULE = process.env.PLUGINS_MODULE;
 // If it has no protocol, it will be treated as relative to window.location.origin
 const STATUS_URL = process.env.STATUS_URL;
 
+const DISABLE_AUTH = process.env.DISABLE_AUTH;
+
 module.exports = {
     ADMIN_API_URL,
     BASE_URL,
     // Config env isn't sent to the client, so excluded from processEnv
     CONFIG_CACHE_TTL_SECONDS,
     CONFIG_DIR,
     CORS_PROXY_PREFIX,
+    DISABLE_AUTH,
     NODE_ENV,
     PLUGINS_MODULE,
     STATUS_URL,
     processEnv: {
         ADMIN_API_URL,
         BASE_URL,
         CORS_PROXY_PREFIX,
+        DISABLE_AUTH,
         NODE_ENV,
         STATUS_URL
     }

src/common/utils.ts

@@ -116,3 +116,13 @@ export function assertNever(
         `Unhandled discriminated union member: ${JSON.stringify(value)}`
     );
 }
+
+/**
+ * Function that returns boolean value for the string or number representation
+ */
+export function toBoolean(value?: string): boolean {
+    if (value == null) {
+        return false;
+    }
+    return ['true', 'True', 'TRUE', '1'].includes(value);
+}

src/config/types.ts

@@ -13,4 +13,5 @@ export interface Env extends NodeJS.ProcessEnv {
     CORS_PROXY_PREFIX: string;
     DISABLE_ANALYTICS?: string;
     STATUS_URL?: string;
+    DISABLE_AUTH?: string;
 }

src/models/AdminEntity/AdminEntity.ts

@@ -1,6 +1,9 @@
 import axios, { AxiosRequestConfig } from 'axios';
+import { env } from 'common/env';
+import { toBoolean } from 'common/utils';
 
 import { generateAdminApiQuery } from './AdminApiQuery';
+
 import { transformRequestError } from './transformRequestError';
 import {
     AdminEntityTransformer,
@@ -44,7 +47,7 @@ async function request(
     const finalOptions = {
         ...options,
         url: adminApiUrl(endpoint),
-        withCredentials: true
+        withCredentials: !toBoolean(env.DISABLE_AUTH)
     };
 
     try {
@@ -70,7 +73,7 @@ export async function getProtobufObject<ResponseType>(
         headers,
         method: 'get',
         responseType: 'arraybuffer',
-        withCredentials: true
+        withCredentials: !toBoolean(env.DISABLE_AUTH)
     };
 
     const { data } = await axios.request(options);