[PR] Direct OAuth login through /auth/login?autoLaunch=1

[Yetangitu]

I have searched the existing feature requests, both open and closed, to make sure this is not a duplicate request.

• Yes

The feature

It wwould be useful for Immich to have a way to directly access the OAuth login workflow through a URL or parameter (e.g. autoLaunch=1, i.e. the opposite of the action mentioned in https://immich.app/docs/administration/oauth#auto-launch).

Here's the use case I'm looking at:

• Immich is linked into a Nextcloud instance through the 'External sites' app
• Nextcloud acts as an OpenID Connect server using the OIDC app
• Immich is configured to use this Nextcloud instance as OAuth provider
• The web server is configured to allow embedding Immich from the Nextcloud domain
• When the user activates the configured Immich instance by clicking on the icon in the Nextcloud header the Immich instance directly activates the OAuth login flow without having to press the 'Login with [Nextcloud instance name]' button
• The user can directly interact with the logged-in Immich instance.

For an example of such a workflow have a look at what e.g. Peertube does when accessed through https://peertube.example.org/plugins/auth-openid-connect/0.1.3/auth/openid-connect - it does not show the login page but directly activates the OAuth login workflow, landing the user inside a logged-in instance.

This feature request aims to achieve the opposite of what featureFlags.oauthAutoLaunch enables in that it explicitly calls for autoLaunch on an instance which does not have this feature enabled instead of always using it with the option to disable it through the use of the autoLaunch=0 parameter. Adding an option to use autoLaunch=1 for the requested feature is probably the most clean way to do it, in ./src/routes/auth/login/+page.svelte (add a check for oauth.isAutoLaunchEnabled) and ./src/lib/utils.ts (add a test for isAutoLaunchEnabled)

Something along these lines (tested, works as intended):

diff --git a/web/src/lib/utils.ts b/web/src/lib/utils.ts
index 645c485cc..c9260252d 100644
--- a/web/src/lib/utils.ts
+++ b/web/src/lib/utils.ts
@@ -275,6 +275,13 @@ export const oauth = {
     }
     return false;
   },
+  isAutoLaunchEnabled: (location: Location) => {
+    const value = 'autoLaunch=1';
+    if (location.search.includes(value)) {
+      return true;
+    }
+    return false;
+  },
   authorize: async (location: Location) => {
     const $t = get(t);
     try {
diff --git a/web/src/routes/auth/login/+page.svelte b/web/src/routes/auth/login/+page.svelte
index 5cce88ae2..194fbb1dc 100644
--- a/web/src/routes/auth/login/+page.svelte
+++ b/web/src/routes/auth/login/+page.svelte
@@ -53,7 +53,7 @@
     }
 
     try {
-      if ($featureFlags.oauthAutoLaunch && !oauth.isAutoLaunchDisabled(globalThis.location)) {
+      if (($featureFlags.oauthAutoLaunch && !oauth.isAutoLaunchDisabled(globalThis.location)) || oauth.isAutoLaunchEnabled(globalThis.location)) {
         await goto(`${AppRoute.AUTH_LOGIN}?autoLaunch=0`, { replaceState: true });
         await oauth.authorize(globalThis.location);
         return;

I submitted a PR for this feature: #18763

Platform

• Server
• Web
• Mobile

[Yetangitu]

The PR has been merged so this request can be closed.