IMHO, I kinda agree with their decision. I see basic auth as just that, user and pass. Anything else should use a proper solution, and there are tons of excellent options.
Immich supports oidc, you should be able to do all auth (including totp) in your auth provider and that all works in the app. I use pocketid with mine and it works everywhere.
One thing I hate about Immich: Their absolute refusal to bake in basic TOTP auth.
IMHO, I kinda agree with their decision. I see basic auth as just that, user and pass. Anything else should use a proper solution, and there are tons of excellent options.
Isn’t that generally what external auth providers are designed for?
I imagine it isn’t much of a concern if Immich isn’t exposed to the internet.
If you want to go the extra mile, you can roll immich with Autelia / Authentik etc. IDP, and use TOTP on that layer.
One problem is that it’s not much use applying secondary auth methods on the server side if the mobile app can’t use them.
Immich supports oidc, you should be able to do all auth (including totp) in your auth provider and that all works in the app. I use pocketid with mine and it works everywhere.
Yeah. I have notest that when I put Tinyauth in front of Copyparty.
The Party Up! app, for uploading files to the server ceased to work. Also my WebDAV mount in Dolphin can’t reach it. Unauthorized!
DuH !!
Fix one thing to discover another problem.