From 50b2cf32a4a920686e53bb1c26d0f3ce6e145a22 Mon Sep 17 00:00:00 2001
From: Dariusz Rozmus <drozmus@student.agh.edu.pl>
Date: Wed, 21 Oct 2026 18:43:25 +0200
Subject: [PATCH 1/4] Names refactoring first step

---
 src/WrapperApp/components/Login/LoginPanel.tsx | 12 +++++++-----
 src/services/AuthService.tsx                   |  4 ++--
 2 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/src/WrapperApp/components/Login/LoginPanel.tsx b/src/WrapperApp/components/Login/LoginPanel.tsx
index 31416ce64..58666174a 100644
--- a/src/WrapperApp/components/Login/LoginPanel.tsx
+++ b/src/WrapperApp/components/Login/LoginPanel.tsx
@@ -12,9 +12,11 @@ export default function LoginPanel() {
 	const { altAuth } = useConfig();
 	const { localUsersEnabled } = useAuth();
 	const { keycloak, initialized } = useKeycloakAuth();
-	const [namePasswordLoginSelected, setNamePasswordLoginSelected] = useState(!altAuth);
+	const [isPasswordLoginSelected, setisPasswordLoginSelected] = useState(!altAuth);
 	// on Keycloak-only deployments the backend rejects local users, so do not offer password login
-	const namePasswordLogin = namePasswordLoginSelected && (localUsersEnabled || !altAuth);
+	const isPasswordLoginAvailable = !altAuth || localUsersEnabled === true;
+
+	const showPasswordLoginForm = isPasswordLoginSelected && isPasswordLoginAvailable;
 
 	const keycloakLogin = useCallback(() => {
 		if (initialized && !keycloak.authenticated) keycloak.login();
@@ -39,7 +41,7 @@ export default function LoginPanel() {
 					backgroundColor: theme.palette.accordion.main,
 					gap: theme.spacing(1)
 				}}>
-				{altAuth && !namePasswordLogin ? (
+				{altAuth && !showPasswordLoginForm ? (
 					<>
 						<Button
 							fullWidth
@@ -58,7 +60,7 @@ export default function LoginPanel() {
 						{localUsersEnabled && (
 							<Link
 								color='textDisabled'
-								onClick={() => setNamePasswordLoginSelected(true)}
+								onClick={() => setisPasswordLoginSelected(true)}
 								sx={{ cursor: 'pointer' }}>
 								use password login
 							</Link>
@@ -70,7 +72,7 @@ export default function LoginPanel() {
 							<Box sx={{ width: '100%' }}>
 								<IconButton
 									size='small'
-									onClick={() => setNamePasswordLoginSelected(false)}>
+									onClick={() => setisPasswordLoginSelected(false)}>
 									<ArrowBack />
 								</IconButton>
 							</Box>
diff --git a/src/services/AuthService.tsx b/src/services/AuthService.tsx
index ccc4b7966..d2abcc0a6 100644
--- a/src/services/AuthService.tsx
+++ b/src/services/AuthService.tsx
@@ -67,7 +67,7 @@ export interface AuthContext {
 	user: AuthUser | null;
 	isAuthorized: boolean;
 	isServerReachable: boolean;
-	localUsersEnabled: boolean;
+	localUsersEnabled: boolean | undefined;
 	login: (...args: RequestAuthLogin) => void;
 	logout: (...args: RequestAuthLogout) => void;
 	refresh: (...args: RequestAuthRefresh) => void;
@@ -85,7 +85,7 @@ const Auth = ({ children }: GenericContextProviderProps) => {
 	const { keycloak, initialized } = useKeycloakAuth();
 	const [keyCloakInterval, setKeyCloakInterval] = useState<number>();
 	const [isServerReachable, setIsServerReachable] = useState<boolean | null>(null);
-	const [localUsersEnabled, setLocalUsersEnabled] = useState(true);
+	const [localUsersEnabled, setLocalUsersEnabled] = useState<boolean>();
 	const { enqueueSnackbar } = useSnackbar();
 	const { open: openRejectKeycloakUserDialog } = useDialog('rejectKeycloak');
 	const { open: openRejectKeycloakRefreshUserDialog } = useDialog('rejectKeycloakRefresh');

From aba4b5ad620c87c5b39b847a3595632aa062c923 Mon Sep 17 00:00:00 2001
From: Dariusz Rozmus <drozmus@student.agh.edu.pl>
Date: Wed, 21 Oct 2026 18:48:52 +0200
Subject: [PATCH 2/4] Logic and typo update

---
 src/WrapperApp/components/Login/LoginPanel.tsx | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/WrapperApp/components/Login/LoginPanel.tsx b/src/WrapperApp/components/Login/LoginPanel.tsx
index 58666174a..441c86abe 100644
--- a/src/WrapperApp/components/Login/LoginPanel.tsx
+++ b/src/WrapperApp/components/Login/LoginPanel.tsx
@@ -12,7 +12,7 @@ export default function LoginPanel() {
 	const { altAuth } = useConfig();
 	const { localUsersEnabled } = useAuth();
 	const { keycloak, initialized } = useKeycloakAuth();
-	const [isPasswordLoginSelected, setisPasswordLoginSelected] = useState(!altAuth);
+	const [isPasswordLoginSelected, setIsPasswordLoginSelected] = useState(!altAuth);
 	// on Keycloak-only deployments the backend rejects local users, so do not offer password login
 	const isPasswordLoginAvailable = !altAuth || localUsersEnabled === true;
 
@@ -57,10 +57,10 @@ export default function LoginPanel() {
 							}}>
 							Connect with PLGrid
 						</Button>
-						{localUsersEnabled && (
+						{isPasswordLoginAvailable && (
 							<Link
 								color='textDisabled'
-								onClick={() => setisPasswordLoginSelected(true)}
+								onClick={() => setIsPasswordLoginSelected(true)}
 								sx={{ cursor: 'pointer' }}>
 								use password login
 							</Link>
@@ -72,7 +72,7 @@ export default function LoginPanel() {
 							<Box sx={{ width: '100%' }}>
 								<IconButton
 									size='small'
-									onClick={() => setisPasswordLoginSelected(false)}>
+									onClick={() => setIsPasswordLoginSelected(false)}>
 									<ArrowBack />
 								</IconButton>
 							</Box>

From f58e570c83ccf6bce23f960d1e9d05bd3edb1d4d Mon Sep 17 00:00:00 2001
From: Dariusz Rozmus <drozmus@student.agh.edu.pl>
Date: Sun, 25 Oct 2026 21:15:06 +0100
Subject: [PATCH 3/4] refactor(auth): rename altAuth config to
 plgridAuthEnabled

---
 src/WrapperApp/components/Login/LoginPanel.tsx | 10 +++++-----
 src/config/ConfigService.tsx                   |  8 ++++----
 src/services/KeycloakAuthService.tsx           | 10 +++++-----
 3 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/src/WrapperApp/components/Login/LoginPanel.tsx b/src/WrapperApp/components/Login/LoginPanel.tsx
index 441c86abe..dd8871d5e 100644
--- a/src/WrapperApp/components/Login/LoginPanel.tsx
+++ b/src/WrapperApp/components/Login/LoginPanel.tsx
@@ -9,12 +9,12 @@ import NamePasswordLoginPanel from './NamePasswordLoginPanel';
 
 export default function LoginPanel() {
 	const theme = useTheme();
-	const { altAuth } = useConfig();
+	const { plgridAuthEnabled } = useConfig();
 	const { localUsersEnabled } = useAuth();
 	const { keycloak, initialized } = useKeycloakAuth();
-	const [isPasswordLoginSelected, setIsPasswordLoginSelected] = useState(!altAuth);
+	const [isPasswordLoginSelected, setIsPasswordLoginSelected] = useState(!plgridAuthEnabled);
 	// on Keycloak-only deployments the backend rejects local users, so do not offer password login
-	const isPasswordLoginAvailable = !altAuth || localUsersEnabled === true;
+	const isPasswordLoginAvailable = !plgridAuthEnabled || localUsersEnabled === true;
 
 	const showPasswordLoginForm = isPasswordLoginSelected && isPasswordLoginAvailable;
 
@@ -41,7 +41,7 @@ export default function LoginPanel() {
 					backgroundColor: theme.palette.accordion.main,
 					gap: theme.spacing(1)
 				}}>
-				{altAuth && !showPasswordLoginForm ? (
+				{plgridAuthEnabled && !showPasswordLoginForm ? (
 					<>
 						<Button
 							fullWidth
@@ -68,7 +68,7 @@ export default function LoginPanel() {
 					</>
 				) : (
 					<>
-						{altAuth && (
+						{plgridAuthEnabled && (
 							<Box sx={{ width: '100%' }}>
 								<IconButton
 									size='small'
diff --git a/src/config/ConfigService.tsx b/src/config/ConfigService.tsx
index dd9b291ee..3d6268e2b 100644
--- a/src/config/ConfigService.tsx
+++ b/src/config/ConfigService.tsx
@@ -6,7 +6,7 @@ import { snakeToCamelCase } from '../util/Notation/Notation';
 
 const BACKEND_URL = process.env.REACT_APP_BACKEND_URL ?? 'http://localhost:5000';
 const DEMO_MODE = process.env.REACT_APP_TARGET === 'demo';
-const ALT_AUTH = process.env.REACT_APP_ALT_AUTH === 'plg';
+const PLGRID_AUTH_ENABLED = process.env.REACT_APP_ALT_AUTH === 'plg';
 
 export const DEPLOYMENT = (process.env.REACT_APP_DEPLOYMENT as ConfigDeployment) ?? 'prod';
 export type ConfigDeployment = 'dev' | 'prod' | undefined;
@@ -17,7 +17,7 @@ interface Config {
 	backendUrl: string;
 	deployment: ConfigDeployment;
 	demoMode: boolean;
-	altAuth: boolean;
+	plgridAuthEnabled: boolean;
 }
 
 declare global {
@@ -36,7 +36,7 @@ const ConfigProvider = ({ children }: { children?: ReactNode }) => {
 		backendUrl: BACKEND_URL,
 		deployment: DEPLOYMENT,
 		demoMode: DEMO_MODE,
-		altAuth: ALT_AUTH
+		plgridAuthEnabled: PLGRID_AUTH_ENABLED
 	});
 	window.BACKEND_URL ??= BACKEND_URL;
 
@@ -74,7 +74,7 @@ const ConfigProvider = ({ children }: { children?: ReactNode }) => {
 			defineProperty('BACKEND_URL');
 			defineProperty('DEPLOYMENT', true);
 			defineProperty('DEMO_MODE');
-			defineProperty('ALT_AUTH');
+			defineProperty('PLGRID_AUTH_ENABLED');
 		}
 	}, [config]);
 
diff --git a/src/services/KeycloakAuthService.tsx b/src/services/KeycloakAuthService.tsx
index 9fe182b14..b8f0ad235 100644
--- a/src/services/KeycloakAuthService.tsx
+++ b/src/services/KeycloakAuthService.tsx
@@ -1,9 +1,9 @@
 import Keycloak, { KeycloakInitOptions } from 'keycloak-js';
 import React, { ReactNode, useCallback } from 'react';
-import KeycloakProvider from '../util/keycloak/KeycloakProvider';
-import { useKeycloak } from '../util/keycloak/useKeycloak';
 
 import { useConfig } from '../config/ConfigService';
+import KeycloakProvider from '../util/keycloak/KeycloakProvider';
+import { useKeycloak } from '../util/keycloak/useKeycloak';
 import { createSubstituteContext, GenericContextProviderProps } from './GenericContext';
 
 const keycloakParams = {
@@ -37,7 +37,7 @@ const [useKeycloakAuth, KeycloakAuthContextProvider] =
 	createSubstituteContext<KeycloakAuthContext>(useKeycloak);
 
 const KeycloakAuth = ({ children }: GenericContextProviderProps) => {
-	const { altAuth } = useConfig();
+	const { plgridAuthEnabled } = useConfig();
 	const proxyContextProvider = useCallback(
 		(children: ReactNode) => (
 			<KeycloakAuthContextProvider
@@ -50,7 +50,7 @@ const KeycloakAuth = ({ children }: GenericContextProviderProps) => {
 		[]
 	);
 
-	return altAuth ? (
+	return plgridAuthEnabled ? (
 		<KeycloakProvider
 			client={authInstance}
 			initOptions={initOptions}>
@@ -61,4 +61,4 @@ const KeycloakAuth = ({ children }: GenericContextProviderProps) => {
 	);
 };
 
-export { KeycloakAuth, useKeycloakAuth };
\ No newline at end of file
+export { KeycloakAuth, useKeycloakAuth };

From 4b6422d7fb307096126039cf9ac0ee4677ee50dd Mon Sep 17 00:00:00 2001
From: Dariusz Rozmus <drozmus@student.agh.edu.pl>
Date: Wed, 28 Oct 2026 20:10:44 +0100
Subject: [PATCH 4/4] refactor(auth): clarify local user availability

---
 src/WrapperApp/components/Login/LoginPanel.tsx |  4 ++--
 src/services/AuthService.tsx                   | 16 ++++++++++++----
 2 files changed, 14 insertions(+), 6 deletions(-)

diff --git a/src/WrapperApp/components/Login/LoginPanel.tsx b/src/WrapperApp/components/Login/LoginPanel.tsx
index dd8871d5e..2c5f2f6bf 100644
--- a/src/WrapperApp/components/Login/LoginPanel.tsx
+++ b/src/WrapperApp/components/Login/LoginPanel.tsx
@@ -10,11 +10,11 @@ import NamePasswordLoginPanel from './NamePasswordLoginPanel';
 export default function LoginPanel() {
 	const theme = useTheme();
 	const { plgridAuthEnabled } = useConfig();
-	const { localUsersEnabled } = useAuth();
+	const { localUsersAvailability } = useAuth();
 	const { keycloak, initialized } = useKeycloakAuth();
 	const [isPasswordLoginSelected, setIsPasswordLoginSelected] = useState(!plgridAuthEnabled);
 	// on Keycloak-only deployments the backend rejects local users, so do not offer password login
-	const isPasswordLoginAvailable = !plgridAuthEnabled || localUsersEnabled === true;
+	const isPasswordLoginAvailable = !plgridAuthEnabled || localUsersAvailability === 'enabled';
 
 	const showPasswordLoginForm = isPasswordLoginSelected && isPasswordLoginAvailable;
 
diff --git a/src/services/AuthService.tsx b/src/services/AuthService.tsx
index d2abcc0a6..eeba53b62 100644
--- a/src/services/AuthService.tsx
+++ b/src/services/AuthService.tsx
@@ -62,12 +62,13 @@ const getRefreshDelay = (exp: number) => Math.max((exp - new Date().getTime()) /
 enum StorageKey {
 	USER = 'editor.user'
 }
+export type LocalUsersAvailability = 'unknown' | 'enabled' | 'disabled';
 
 export interface AuthContext {
 	user: AuthUser | null;
 	isAuthorized: boolean;
 	isServerReachable: boolean;
-	localUsersEnabled: boolean | undefined;
+	localUsersAvailability: LocalUsersAvailability;
 	login: (...args: RequestAuthLogin) => void;
 	logout: (...args: RequestAuthLogout) => void;
 	refresh: (...args: RequestAuthRefresh) => void;
@@ -85,7 +86,8 @@ const Auth = ({ children }: GenericContextProviderProps) => {
 	const { keycloak, initialized } = useKeycloakAuth();
 	const [keyCloakInterval, setKeyCloakInterval] = useState<number>();
 	const [isServerReachable, setIsServerReachable] = useState<boolean | null>(null);
-	const [localUsersEnabled, setLocalUsersEnabled] = useState<boolean>();
+	const [localUsersAvailability, setLocalUsersAvailability] =
+		useState<LocalUsersAvailability>('unknown');
 	const { enqueueSnackbar } = useSnackbar();
 	const { open: openRejectKeycloakUserDialog } = useDialog('rejectKeycloak');
 	const { open: openRejectKeycloakRefreshUserDialog } = useDialog('rejectKeycloakRefresh');
@@ -155,7 +157,13 @@ const Auth = ({ children }: GenericContextProviderProps) => {
 			.get(``)
 			.json<ResponseRoot>()
 			.then(r => {
-				setLocalUsersEnabled(r.localUsersEnabled ?? true);
+				setLocalUsersAvailability(
+					r.localUsersEnabled === undefined
+						? 'enabled'
+						: r.localUsersEnabled
+							? 'enabled'
+							: 'disabled'
+				);
 
 				return !!r.message;
 			})
@@ -367,7 +375,7 @@ const Auth = ({ children }: GenericContextProviderProps) => {
 				user,
 				isAuthorized,
 				isServerReachable: Boolean(isServerReachable),
-				localUsersEnabled,
+				localUsersAvailability,
 				login,
 				logout,
 				authKy,