Allow configuring auth_required in service config

Author: manisandro

schemas/qwc-map-viewer.json

@@ -134,8 +134,12 @@
           "description": "User info field to display instead of username",
           "type": "string"
         },
+        "auth_required": {
+          "description": "Whether to enforce authentication before processing requests. Default: false",
+          "type": "boolean"
+        },
         "public_paths": {
-          "description": "Optional: List of paths that will be accessible without a JWT identity, if AUTH_REQUIRED is set.",
+          "description": "Optional: List of paths that will be accessible without a JWT identity, if auth_required is set.",
           "type": "array",
           "items": {
             "type": "string"

src/server.py

@@ -11,8 +11,6 @@
 from qwc2_viewer import QWC2Viewer
 
 # Autologin config
-AUTH_REQUIRED = os.environ.get(
-    'AUTH_REQUIRED', '0') not in [0, "0", False, "false", "False", "FALSE"]
 AUTH_PATH = os.environ.get(
     'AUTH_SERVICE_URL',
     # For backward compatiblity
@@ -73,11 +71,11 @@ def assert_user_is_logged():
     if request.path in public_paths:
         return
 
-    if AUTH_REQUIRED:
+    if config.get("auth_required", False):
         identity = get_identity()
         if identity is None:
             app.logger.info("Access denied, authentication required")
-            prefix = auth_path_prefix()
+            prefix = auth_path_prefix().rstrip('/')
             return redirect(prefix + '/login?url=%s' % urllib.parse.quote(request.url))