Skip to main content

FUME_DESIGNER_AUTH_ENABLED

Applies to​

  • Designer v3.1.0+

Default​

  • Designer: false

Examples​

# Run the Designer in authenticated mode
FUME_DESIGNER_AUTH_ENABLED=true

# Run the Designer in public mode (default)
FUME_DESIGNER_AUTH_ENABLED=false

Purpose​

Master switch for authentication in the Mapping Designer. When true, the Designer discovers the FUME server's OAuth/OIDC configuration from its protected-resource metadata and shows sign-in controls. When false, the Designer skips discovery entirely and behaves as a public client (no Authorization header, no sign-in UI).

Notes​

  • In authenticated mode the Designer needs no identity-provider configuration of its own — the issuer, client id, and scope all come from the FUME server's /.well-known/oauth-protected-resource response.
  • The Designer uses the server-assisted (token-mediator) login flow or direct PKCE depending on what the server advertises.
  • When the FUME Helm chart deploys FUME with backend auth enabled, it sets FUME_DESIGNER_AUTH_ENABLED=true automatically; set it explicitly to override.
  • For the server side of this feature and the Designer sign-in experience, see Authentication & Authorization.