Add support for OAuth login

[vins345]

Only login and password is to weak secure for 2022 year :)

[n1ckoates]

Support for security keys would also be great, if it's not too much of a hassle.

[adyanth]

I would say instead of rolling your own, it is better to add OAuth2.0/OIDC support and let the identity providers/auth servers like Authelia or KeyCloak do that job of handling users/rules/2FA/security keys etc.

Username and password is indeed weak for 2022 :)

[alextran1502]

@adyanth Thank man, I like this approach. I will look into incorporating them into the application.

[erikthegamer1242]

I would say instead of rolling your own, it is better to add OAuth2.0/OIDC support and let the identity providers/auth servers like Authelia or KeyCloak do that job of handling users/rules/2FA/security keys etc.

Username and password is indeed weak for 2022 :)

Please implement Authelia and KeyCloack they are the kings when it comes to self-hosted 2FA

[adyanth]

With OIDC in place, it should work with both of them and many many more :)

[ippocratis]

I just finished setting up caddy-security plugin
It does not require any integtagration in the immich side
You just reverse proxy to the imich port on localhost and authorise it with mfa

Reference config

I realised what I just wrote was untrue

Immich app still needs a way to pass the 2fa pin

[alextran1502]

The work is being carried on in #207 - Closing this issue

[jrasm91]

Implemented in #884, #990.