Ruben FiszelandClaude Opus 4.7 0cfa131254 feat: add disable_password_login global setting (#8873) ...

Adds an instance-level toggle that hides the email/password form on the
login page and rejects password login, password reset request, and
password reset endpoints server-side. Useful for OAuth/SAML-only
deployments.

- New `disable_password_login` global setting + lazy_static AtomicBool
- `load_disable_password_login` loader wired into monitor initial_load
  and notify_global_setting_change listener
- Unauthenticated `GET /auth/is_password_login_disabled` endpoint so the
  login page can hide the password form when enabled
- Toggle in Instance Settings → Auth/OAuth/SAML
- Login.svelte hides the password form and the "Log in without
  third-party" toggle when the setting is on

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-17 18:12:30 +00:00

..

runnable_settings

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

secret_backend

fix: refresh custom instance user password if auth failed (#8787)

2026-04-10 14:26:53 +00:00

agent_workers.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

ai_bedrock.rs

fix: clean ai memory and cache bedrock prompts (#8847)

2026-04-16 14:30:22 +00:00

ai_cache.rs

feat: add instance-level AI settings (#8453)

2026-03-24 19:18:36 +00:00

ai_google.rs

fix: preserve gemini thought signatures in ai chat (#8837)

2026-04-15 11:49:57 +00:00

ai_providers.rs

fix: SSRF via X-Resource-Path header in AI proxy endpoint (#8712)

2026-04-04 00:43:08 +00:00

ai_types.rs

feat: add PDF input support to AI agent (#8525)

2026-03-26 13:55:10 +00:00

apps.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

assets.rs

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058)

2026-03-05 06:19:51 +00:00

audit.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

auth.rs

fix: replace email with permissioned_as for triggers/schedules (#8439)

2026-03-20 16:28:38 +00:00

bench.rs

feat: make WINDMILL_DIR configurable via environment variable (#8215)

2026-03-04 08:53:25 +00:00

cache.rs

fix: preserve flow notes/groups and field ordering in generate-metadata (#8641) (#8642)

2026-03-31 13:48:22 +00:00

client.rs

Better S3 error context (#8829)

2026-04-14 20:17:28 +00:00

db_params.rs

feat: add Entra ID (Azure Workload Identity) database auth (#8526)

2026-04-02 16:00:33 +02:00

db.rs

feat: mcp oauth gateway (#8443)

2026-03-20 16:12:59 +00:00

deployment_requests_oss.rs

feat: add deploy restriction rule and fork review requests (#8804)

2026-04-13 17:10:37 +00:00

ee_oss.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

email_oss.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

error.rs

feat: workflow-as-code (WAC) v2 (#8172)

2026-03-09 19:39:24 +00:00

external_ip.rs

feat(internal): runnable settings (#7298)

2025-12-16 21:17:06 +00:00

flow_conversations.rs

refactor: extract windmill-dep-map crate for parallel api/worker compilation (#7846)

2026-02-08 00:39:56 +00:00

flow_status.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

flows.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

folders.rs

feat: folder default_permissioned_as rules for ownership defaults on deploy (#8801)

2026-04-12 20:14:07 +00:00

git_sync_oss.rs

feat: add GitHub Enterprise Server (GHES) support for GitHub App git sync (#8344)

2026-03-13 08:21:15 +00:00

global_settings.rs

feat: add disable_password_login global setting (#8873)

2026-04-17 18:12:30 +00:00

indexer.rs

fix: lower default indexer memory/batch settings to prevent OOM (#8347)

2026-03-13 06:03:45 +00:00

instance_config.rs

fix: persist indexer max_index_time_window_secs setting (#8821)

2026-04-13 23:56:38 +00:00

job_metrics.rs

perf: optimize job_stats storage for timestamps and zero-memory jobs (#8289)

2026-03-10 04:59:56 +00:00

jobs.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

jwt.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

lib.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

lockfiles.rs

fix: dep jobs improvements (#7081)

2025-11-07 11:04:53 +00:00

log_context.rs

fix: enrich OTEL log records with per-request LogContext (#8812)

2026-04-13 21:50:50 +00:00

login_rate_limit.rs

widen login rate limit defaults to reduce false positives (#8603)

2026-03-29 14:01:13 +00:00

min_version.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

more_serde.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

notify_events.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

oauth2.rs

feat: add LOGIN_DOMAIN env var to normalize emails during external login

2026-01-27 00:01:35 +00:00

oidc_oss.rs

feat: add end_user_email claim to OIDC ID tokens (#8401)

2026-03-17 00:17:03 +00:00

otel_oss.rs

test: add OTEL coverage tests (#8558)

2026-03-27 18:28:59 +00:00

query_builders.rs

fix: DB Manager delete/update for timestamp and serial types (#8830)

2026-04-14 20:17:39 +00:00

queue.rs

feat: add prometheus metric queue_running_count (#6413)

2025-08-19 22:12:36 +00:00

result_stream.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

runtime_assets.rs

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079)

2026-02-25 12:05:22 +00:00

schedule.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

schema.rs

feat: add CI test scripts with auto-trigger on deploy (#8736)

2026-04-09 17:21:36 +00:00

scripts.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

sensitive_log_masks.rs

fix: smarter secret masking based on secret length (#8629)

2026-03-30 19:59:08 +00:00

server.rs

add opt-in SMTP click tracking disable for email links (#8665)

2026-04-02 20:44:08 +00:00

ssrf.rs

SSRF protection for SAML and MCP OAuth endpoints (#8473)

2026-03-22 17:18:22 +00:00

stats_oss.rs

improve analytics (#8418)

2026-03-17 20:14:02 +00:00

stream.rs

fix: add size limit to indexer queries on jobs table to avoid oom (#6293)

2025-07-29 18:27:59 +00:00

teams_oss.rs

feat(internal): runnable settings (#7298)

2025-12-16 21:17:06 +00:00

tracing_init.rs

fix: refresh custom instance user password if auth failed (#8787)

2026-04-10 14:26:53 +00:00

trashbin.rs

feat: add trashbin system for soft-deleting items (#8519)

2026-03-26 09:51:34 +00:00

triggers.rs

feat: cascade trigger script_path on runnable rename + fix trigger permissioned_as (#8823)

2026-04-14 20:42:13 +00:00

usernames.rs

refactor: extract 12 leaf crates from windmill-api (#7899)

2026-02-11 10:31:03 +00:00

users.rs

fix: compute highest workspace role across all instance groups (#8633)

2026-03-31 09:08:48 +00:00

utils.rs

Better S3 error context (#8829)

2026-04-14 20:17:28 +00:00

variables.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

wac.rs

perf: add inline-persist fast path for WAC v2 step() (#8807)

2026-04-13 16:49:53 +00:00

webhook.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

worker_group_job_stats.rs

fix nits worker group stats

2025-09-11 09:19:09 +00:00

worker.rs

fix: workspace specfic tags compatibility with forked workspaces (#8850)

2026-04-16 15:56:41 +00:00

workspace_dependencies.rs

feat: add workspace dependencies support for powershell (#8395)

2026-03-16 15:37:28 +00:00

workspaces.rs

fix: workspace specfic tags compatibility with forked workspaces (#8850)

2026-04-16 15:56:41 +00:00