add auth

backend/app/main.py

@@ -20,7 +20,8 @@ from fastapi.staticfiles import StaticFiles
 
 from app import __version__
 from app.api import api_router
-from app.api.deps import require_token
+from app.api.deps import require_auth
+from app.api.routes_auth import router as auth_router
 from app.config import env_settings
 from app.db import init_db, session_scope
 from app.services import scheduler, settings_service, telegram_bot
@@ -70,7 +71,8 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
-app.include_router(api_router, dependencies=[Depends(require_token)])
+app.include_router(auth_router)
+app.include_router(api_router, dependencies=[Depends(require_auth)])
 
 
 @app.get("/api/health", tags=["meta"])
@@ -82,9 +84,14 @@ def health() -> dict:
 def info() -> dict:
     """What a client needs to know before it has a token: who we are, what is on."""
     env = env_settings()
+    with session_scope() as session:
+        settings = settings_service.load_settings(session)
+    login_required = bool(settings.auth.password_hash) or (
+        settings.auth.telegram_login_enabled and bool(settings.auth.telegram_owner_id)
+    )
     return {
         "version": __version__,
-        "auth_required": bool(env.api_token),
+        "auth_required": bool(env.api_token) or login_required,
         "scheduler": env.scheduler_enabled,
         "jobs": scheduler.describe(),
     }