[backend/frontend] Fix localStrategy on force env (#15311)

Author: aHenryJard

opencti-platform/opencti-front/lang/front/de.json

@@ -2509,6 +2509,7 @@
   "Live trigger": "Live-Trigger",
   "Loading current message count...": "Laden der aktuellen Nachrichtenanzahl...",
   "Local": "Lokal",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "Die lokale Authentifizierung kann nicht geändert werden, wenn die Authentifizierung über die Umgebungskonfiguration verwaltet wird",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "Die lokale Authentifizierung kann nicht deaktiviert werden, wenn kein anderer Authentifizierungsanbieter aktiviert ist",
   "Local password policies": "Lokale Kennwortrichtlinien",
   "Local settings": "Lokale Einstellungen",

opencti-platform/opencti-front/lang/front/en.json

@@ -2509,6 +2509,7 @@
   "Live trigger": "Live trigger",
   "Loading current message count...": "Loading current message count...",
   "Local": "Local",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "Local authentication cannot be changed when authentication is managed by environment configuration",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "Local authentication cannot be disabled when no other authentication provider is enabled",
   "Local password policies": "Local password policies",
   "Local settings": "Local settings",

opencti-platform/opencti-front/lang/front/es.json

@@ -1928,9 +1928,9 @@
   "Force reauthentication": "Forzar reautenticación",
   "Forecast": "Previsión",
   "Form": "Formulario",
+  "FORM": "FORMULARIO",
   "Form intakes": "Formularios de ingesta",
   "Form intakes | Ingestion | Data": "Formularios de ingesta | Ingestión | Datos",
-  "FORM": "FORMULARIO",
   "Form not found": "Formulario no encontrado",
   "Form schema in JSON format": "Esquema del formulario en formato JSON",
   "Form schema is required": "Se requiere esquema de formulario",
@@ -2509,6 +2509,7 @@
   "Live trigger": "Disparador en vivo",
   "Loading current message count...": "Cargando recuento de mensajes actual...",
   "Local": "Local",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "La autenticación local no puede modificarse cuando la autenticación se gestiona mediante la configuración del entorno",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "La autenticación local no se puede deshabilitar cuando no hay otro proveedor de autenticación habilitado",
   "Local password policies": "Políticas locales de contraseñas",
   "Local settings": "Configuración local",
@@ -4844,8 +4845,8 @@
   "You see only marking definitions that can be shared (defined by the admin)": "Sólo se ven las definiciones de marcado que se pueden compartir (definidas por el administrador)",
   "You should activate EE to use this feature": "Debe activar EE para utilizar esta función",
   "You should provide a variable name": "Debe proporcionar un nombre de variable",
-  "You will be able to revert this change if needed. ": "Podrá revertir este cambio si es necesario.",
   "You were automatically logged out due to session expiration.": "Se ha cerrado automáticamente la sesión debido a la expiración de la misma.",
+  "You will be able to revert this change if needed. ": "Podrá revertir este cambio si es necesario.",
   "You will be automatically logged out at end of the timer.": "Se cerrará la sesión automáticamente al final del temporizador.",
   "You will find here the computed state.": "Aquí encontrará el estado calculado.",
   "You will find here the result in JSON format.": "Aquí encontrará el resultado en formato JSON.",
@@ -4873,4 +4874,4 @@
   "Zoom": "Zoom",
   "Zoom in": "Ampliar",
   "Zoom out": "Alejar"
-}
+}

opencti-platform/opencti-front/lang/front/fr.json

@@ -2509,6 +2509,7 @@
   "Live trigger": "Déclencheur live",
   "Loading current message count...": "Chargement du nombre de messages en cours...",
   "Local": "Local",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "L'authentification locale ne peut pas être modifiée lorsque l'authentification est gérée par la configuration de l'environnement",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "L'authentification locale ne peut pas être désactivée lorsqu'aucun autre fournisseur d'authentification n'est activé",
   "Local password policies": "Politiques locales en matière de mots de passe",
   "Local settings": "Paramètres locaux",

opencti-platform/opencti-front/lang/front/it.json

@@ -2509,6 +2509,7 @@
   "Live trigger": "Trigger live",
   "Loading current message count...": "Caricamento del numero di messaggi attuali...",
   "Local": "Locale",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "L'autenticazione locale non può essere modificata quando l'autenticazione è gestita dalla configurazione dell'ambiente",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "L'autenticazione locale non può essere disabilitata se nessun altro provider di autenticazione è abilitato",
   "Local password policies": "Politiche locali sulla password",
   "Local settings": "Impostazioni locali",

opencti-platform/opencti-front/lang/front/ja.json

@@ -2144,6 +2144,7 @@
   "If you want to keep the associated information, we recommend deactivating the user instead.": "関連情報を保持したい場合は、代わりにユーザーを非アクティブ化することをお勧めします。",
   "If your email address is found, an email will be sent to you.": "あなたのメールアドレスが見つかった場合、Eメールが送信されます。",
   "if your service account has been created originally as a service account (not transformed), please also change the email of your service account before/after transforming it to a user to ensure that the future user will be able to receive an email in the forgot password workflow.": "サービスアカウントが元々サービスアカウントとして作成されている（変換されていない）場合、パスワード忘れワークフローで将来のユーザーが確実にメールを受信できるように、ユーザーへの変換前/後のサービスアカウントのメールも変更してください。",
+  "Image URL": "画像URL",
   "IMEI values can only include digits, must be 15 to 16 characters": "IMEI値は数字のみで、15文字から16文字でなければなりません。",
   "Impact": "衝撃",
   "Impacted": "影響",
@@ -2508,6 +2509,7 @@
   "Live trigger": "ライブトリガー",
   "Loading current message count...": "現在のメッセージ数をロード中...",
   "Local": "ローカル",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "認証が環境設定で管理されている場合、ローカル認証は変更できない",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "他の認証プロバイダーが有効になっていない場合、ローカル認証を無効にすることはできません",
   "Local password policies": "ローカルパスワードポリシー",
   "Local settings": "ローカル設定",

opencti-platform/opencti-front/lang/front/ko.json

@@ -2509,6 +2509,7 @@
   "Live trigger": "실시간 트리거",
   "Loading current message count...": "현재 메시지 수 로드 중...",
   "Local": "로컬",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "환경 구성으로 인증이 관리되는 경우 로컬 인증을 변경할 수 없습니다",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "다른 인증 공급자가 활성화되어 있지 않으면 로컬 인증을 비활성화할 수 없습니다",
   "Local password policies": "로컬 비밀번호 정책",
   "Local settings": "로컬 설정",

opencti-platform/opencti-front/lang/front/ru.json

@@ -2509,6 +2509,7 @@
   "Live trigger": "Живой триггер",
   "Loading current message count...": "Загрузка текущего количества сообщений...",
   "Local": "Локальный",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "Локальная аутентификация не может быть изменена, если аутентификация управляется конфигурацией среды",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "Локальная аутентификация не может быть отключена, если не включен другой провайдер аутентификации",
   "Local password policies": "Локальные политики паролей",
   "Local settings": "Локальные настройки",

opencti-platform/opencti-front/lang/front/zh.json

@@ -2509,6 +2509,7 @@
   "Live trigger": "实时触发器",
   "Loading current message count...": "正在加载当前信息数...",
   "Local": "本地",
+  "Local authentication cannot be changed when authentication is managed by environment configuration": "当身份验证由环境配置管理时，无法更改本地身份验证",
   "Local authentication cannot be disabled when no other authentication provider is enabled": "当未启用其他身份验证提供程序时，无法禁用本地身份验证",
   "Local password policies": "本地密码策略",
   "Local settings": "本地设置",

opencti-platform/opencti-front/src/private/components/settings/sso_definitions/LocalStrategyForm.tsx

@@ -42,6 +42,7 @@ const localStrategyFormQuery = graphql`
         enabled
       }
       platform_https_enabled
+      is_authentication_by_env
     }
   }
 `;
@@ -86,6 +87,7 @@ const LocalStrategyForm = ({ onCancel }: LocalStrategyFormProps) => {
   const theme = useTheme<Theme>();
   const data = useLazyLoadQuery<LocalStrategyFormQuery>(localStrategyFormQuery, {});
   const settings = data.settings;
+  const isConfigurationFromEnv = settings.is_authentication_by_env ?? false;
 
   const [commitMutation] = useApiMutation<LocalStrategyFormMutation>(
     localStrategyFormMutation,
@@ -159,8 +161,13 @@ const LocalStrategyForm = ({ onCancel }: LocalStrategyFormProps) => {
               type="checkbox"
               name="enabled"
               label={t_i18n('Enable local authentication')}
-              disabled={!canDisableLocal && initialValues.enabled}
+              disabled={isConfigurationFromEnv || (!canDisableLocal && initialValues.enabled)}
             />
+            {isConfigurationFromEnv && (
+              <Tooltip title={t_i18n('Local authentication cannot be changed when authentication is managed by environment configuration')}>
+                <InfoOutlined fontSize="small" color="primary" sx={{ ml: 1, cursor: 'default' }} />
+              </Tooltip>
+            )}
             {!canDisableLocal && initialValues.enabled && (
               <Tooltip title={t_i18n('Local authentication cannot be disabled when no other authentication provider is enabled')}>
                 <InfoOutlined fontSize="small" color="primary" sx={{ ml: 1, cursor: 'default' }} />