How do you enable OIDC login only?

[sloria]

I'm running weblate in Docker and I'd like to disable password authentication and use OIDC only.

services:
  weblate:
    environment:
      # ...
      WEBLATE_REGISTRATION_OPEN: 0
      WEBLATE_LOGIN_REQUIRED: 0
      # This doesn't appear to have any effect
      WEBLATE_AUTHENTICATION_BACKENDS: weblate.accounts.auth.WeblateUserBackend
      # OIDC
      WEBLATE_SOCIAL_AUTH_OIDC_OIDC_ENDPOINT: ${WEBLATE_SOCIAL_AUTH_OIDC_OIDC_ENDPOINT}
      WEBLATE_SOCIAL_AUTH_OIDC_KEY: ${WEBLATE_SOCIAL_AUTH_OIDC_KEY}
      WEBLATE_SOCIAL_AUTH_OIDC_SECRET: ${WEBLATE_SOCIAL_AUTH_OIDC_SECRET}
      # ...

What's the proper way to achieve this?

[nijel]

The environment variables only work for some settings (see https://docs.weblate.org/en/latest/admin/install/docker.html).

Additional support needs to be implemented in https://github.com/WeblateOrg/weblate/blob/main/weblate/settings_docker.py.

[sloria]

👍 Thanks for pointing me to the settings_docker.py file. I found

weblate/weblate/settings_docker.py

Line 275 in 42ddb55

if "WEBLATE_NO_EMAIL_AUTH" not in os.environ:

So I'm able achieve what I need by setting

      WEBLATE_NO_EMAIL_AUTH: 1

[nijel]

Let's make it easier to find in the docs: #17175