feature: Cleanup auth code (#444)

internal/httpservers/restapi.go

@@ -58,12 +58,12 @@ func parseRequestMetadata(ctx context.Context, req *http.Request) metadata.MD {
 		provider = "jwt-cookie"
 	}
 
-	if cfg.AuthHttpHeaderUsername != "" {
+	if cfg.AuthHttpHeaderUsername != "" && username == "" {
 		username, usergroup = parseHttpHeaderForAuth(req)
 		provider = "http-header"
 	}
 
-	if len(cfg.AuthOAuth2Providers) > 0 {
+	if len(cfg.AuthOAuth2Providers) > 0 && username == "" {
 		username, usergroup, sid = parseOAuth2Cookie(req)
 		provider = "oauth2"
 	}

internal/httpservers/restapi_auth_oauth2.go

@@ -254,6 +254,10 @@ func parseOAuth2Cookie(r *http.Request) (string, string, string) {
 		return "", "", ""
 	}
 
+	if cookie.Value == "" {
+		return "", "", ""
+	}
+
 	serverState, found := registeredStates[cookie.Value]
 
 	if !found {

internal/httpservers/webuiServer.go

@@ -142,7 +142,7 @@ func generateWebUISettings(w http.ResponseWriter, r *http.Request) {
 		SshFoundConfig:         installationinfo.Runtime.SshFoundConfig,
 		EnableCustomJs:         cfg.EnableCustomJs,
 		AuthLoginUrl:           cfg.AuthLoginUrl,
-		AuthLocalLogin:         true,
+		AuthLocalLogin:         cfg.AuthLocalUsers.Enabled,
 		AuthOAuth2Providers:    buildPublicOAuth2ProvidersList(cfg),
 		AdditionalLinks:        cfg.AdditionalNavigationLinks,
 	})