IMHO, I kinda agree with their decision. I see basic auth as just that, user and pass. Anything else should use a proper solution, and there are tons of excellent options.
Immich supports oidc, you should be able to do all auth (including totp) in your auth provider and that all works in the app. I use pocketid with mine and it works everywhere.
One thing I hate about Immich: Their absolute refusal to bake in basic TOTP auth.
IMHO, I kinda agree with their decision. I see basic auth as just that, user and pass. Anything else should use a proper solution, and there are tons of excellent options.
Isn’t that generally what external auth providers are designed for?
I imagine it isn’t much of a concern if Immich isn’t exposed to the internet.
If you want to go the extra mile, you can roll immich with Autelia / Authentik etc. IDP, and use TOTP on that layer.
One problem is that it’s not much use applying secondary auth methods on the server side if the mobile app can’t use them.
Good thing it can use them then.
Running authelia SSO OIDC with immich in the app for 3 years now.
The immich mobile app can use OIDC, it just shows you the button on login, which then opens a browser window to login with the external provider
Immich supports oidc, you should be able to do all auth (including totp) in your auth provider and that all works in the app. I use pocketid with mine and it works everywhere.