feat: Add authentication configuration and validation

- Introduced new authentication settings in config.py including `auth_enabled`, `admin_username`, `admin_password`, and `session_secret`.
- Added validation for `session_secret` to ensure it meets security requirements when authentication is enabled.
- Updated main.py to conditionally mount static files and log warnings if the directory is not found.
- Removed unused email template files and added new authentication and notification setup documentation.
- Implemented authentication configuration validation in validators.py and updated settings display.
- Enhanced the user interface with a new login template and SVG assets for branding.
- Added comprehensive guides for setting up authentication and notifications in the documentation.

app/utils/config_validator/__init__.py

@@ -6,6 +6,7 @@ from app.utils.config_validator.validators import (
     validate_email_config,
     validate_storage_configs,
     validate_notification_config,
+    validate_auth_config,
     check_all_configs
 )
 from app.utils.config_validator.masking import mask_sensitive_value
@@ -19,6 +20,7 @@ __all__ = [
     'validate_email_config',
     'validate_storage_configs',
     'validate_notification_config',
+    'validate_auth_config',
     'mask_sensitive_value',
     'get_provider_status',
     'get_settings_for_display',

app/utils/config_validator/providers.py

@@ -11,6 +11,29 @@ def get_provider_status():
     """
     providers = {}
     
+    # Add Authentication configuration
+    auth_enabled = getattr(settings, 'auth_enabled', False)
+    using_oidc = bool(getattr(settings, 'authentik_client_id', None) and 
+                     getattr(settings, 'authentik_client_secret', None) and
+                     getattr(settings, 'authentik_config_url', None))
+    
+    auth_method = "OIDC" if using_oidc else "Basic Auth" if auth_enabled else "None"
+    
+    providers["Authentication"] = {
+        "name": "Authentication", 
+        "icon": "fa-solid fa-lock",
+        "configured": bool(auth_enabled and 
+                         (getattr(settings, 'admin_username', None) or 
+                          using_oidc)),
+        "enabled": auth_enabled,
+        "description": "Access control and user authentication",
+        "details": {
+            "method": auth_method,
+            "provider_name": getattr(settings, 'oauth_provider_name', 'Not set') if using_oidc else "N/A",
+            "session_security": "Configured" if getattr(settings, 'session_secret', None) else "Not configured"
+        }
+    }
+    
     # Add Notification configuration - Make sure this provider is near the top of the list
     providers["Notifications"] = {
         "name": "Notifications", 

app/utils/config_validator/settings_display.py

@@ -77,9 +77,13 @@ def get_settings_for_display(show_values=False):
         ],
         "Authentication": [
             "auth_enabled",
+            "session_secret",
+            "admin_username",
+            "admin_password",
             "authentik_client_id",
             "authentik_client_secret",
-            "authentik_config_url"
+            "authentik_config_url",
+            "oauth_provider_name"
         ],
         "Email": [
             "email_host",

app/utils/config_validator/validators.py

@@ -33,6 +33,35 @@ def validate_email_config():
     
     return issues
 
+def validate_auth_config():
+    """Validates authentication configuration settings"""
+    issues = []
+    
+    # If auth is enabled, check for required settings
+    if getattr(settings, 'auth_enabled', False):
+        # Check for session secret
+        if not getattr(settings, 'session_secret', None):
+            issues.append("SESSION_SECRET is not configured but AUTH_ENABLED is True")
+        elif len(getattr(settings, 'session_secret', '')) < 32:
+            issues.append("SESSION_SECRET must be at least 32 characters long")
+        
+        # Check if using simple authentication or OIDC
+        using_simple_auth = bool(getattr(settings, 'admin_username', None) and 
+                                getattr(settings, 'admin_password', None))
+        
+        using_oidc = bool(getattr(settings, 'authentik_client_id', None) and 
+                         getattr(settings, 'authentik_client_secret', None) and
+                         getattr(settings, 'authentik_config_url', None))
+        
+        if not using_simple_auth and not using_oidc:
+            issues.append("Neither simple authentication nor OIDC are properly configured")
+        
+        # If using OIDC, check for provider name
+        if using_oidc and not getattr(settings, 'oauth_provider_name', None):
+            issues.append("OAUTH_PROVIDER_NAME is not configured but OIDC is enabled")
+    
+    return issues
+
 def validate_storage_configs():
     """Validates configuration for all storage providers"""
     issues = {}
@@ -176,6 +205,13 @@ def check_all_configs():
     if hasattr(settings, 'debug') and settings.debug:
         dump_all_settings()
     
+    # Check auth config
+    auth_issues = validate_auth_config()
+    if auth_issues:
+        logger.warning(f"Authentication configuration issues: {', '.join(auth_issues)}")
+    else:
+        logger.info("Authentication configuration OK")
+    
     # Check email config
     email_issues = validate_email_config()
     if email_issues:
@@ -200,6 +236,7 @@ def check_all_configs():
     
     # Return all identified issues
     return {
+        'auth': auth_issues,
         'email': email_issues,
         'storage': storage_issues,
         'notification': notification_issues