diff --git a/docs/administration/config-cheat-sheet.md b/docs/administration/config-cheat-sheet.md index 18395987..d2377091 100644 --- a/docs/administration/config-cheat-sheet.md +++ b/docs/administration/config-cheat-sheet.md @@ -677,9 +677,11 @@ And the following unique queues: BASIC and the user's password. Please note if you disable this you will not be able to access the tokens API endpoints using a password. Further, this only disables BASIC authentication using the password - not tokens or OAuth Basic. -- `ENABLE_PASSWORD_SIGNIN_FORM`: **true**: Show the password login form (for password-based login). +- `ENABLE_PASSWORD_SIGNIN_FORM`: **true**: Show the password login form (for password-based login), + otherwise, only show OAuth2 or passkey login methods if they are enabled. If you set it to false, maybe it also needs to set `ENABLE_BASIC_AUTHENTICATION` to false to completely disable password-based authentication. +- `ENABLE_PASSKEY_AUTHENTICATION`: **true**: Allow users to sign-in with a passkey - `ENABLE_REVERSE_PROXY_AUTHENTICATION`: **false**: Enable this to allow reverse proxy authentication for web requests - `ENABLE_REVERSE_PROXY_AUTHENTICATION_API`: **false**: Enable this to allow reverse proxy authentication for API requests, the reverse proxy is responsible for ensuring that no CSRF is possible. - `ENABLE_REVERSE_PROXY_AUTO_REGISTRATION`: **false**: Enable this to allow auto-registration diff --git a/versioned_docs/version-1.23/administration/config-cheat-sheet.md b/versioned_docs/version-1.23/administration/config-cheat-sheet.md index b631777c..90001aa1 100644 --- a/versioned_docs/version-1.23/administration/config-cheat-sheet.md +++ b/versioned_docs/version-1.23/administration/config-cheat-sheet.md @@ -664,9 +664,11 @@ And the following unique queues: BASIC and the user's password. Please note if you disable this you will not be able to access the tokens API endpoints using a password. Further, this only disables BASIC authentication using the password - not tokens or OAuth Basic. -- `ENABLE_PASSWORD_SIGNIN_FORM`: **true**: Show the password login form (for password-based login). +- `ENABLE_PASSWORD_SIGNIN_FORM`: **true**: Show the password login form (for password-based login), + otherwise, only show OAuth2 or passkey login methods if they are enabled. If you set it to false, maybe it also needs to set `ENABLE_BASIC_AUTHENTICATION` to false to completely disable password-based authentication. +- `ENABLE_PASSKEY_AUTHENTICATION`: **true**: Allow users to sign-in with a passkey - `ENABLE_REVERSE_PROXY_AUTHENTICATION`: **false**: Enable this to allow reverse proxy authentication for web requests - `ENABLE_REVERSE_PROXY_AUTHENTICATION_API`: **false**: Enable this to allow reverse proxy authentication for API requests, the reverse proxy is responsible for ensuring that no CSRF is possible. - `ENABLE_REVERSE_PROXY_AUTO_REGISTRATION`: **false**: Enable this to allow auto-registration