feat: local auth disabled mode and dev images by mnafees · Pull Request #4325 · hatchet-dev/hatchet

mnafees · 2026-07-01T10:11:07Z

Description

Introduces the local auth disabled mode. Partially fulfills #3680.

Type of change

Documentation change (pure documentation change)
New feature (non-breaking change which adds functionality)

What's Changed

Add auth disabled build tags to build -dev prefixed images
Add warnings about dev local usage only
Add documentation
Add new --disable-auth flag to hatchet server start

Checklist

Changes have been:

Tested (unit, integration, or manually with steps specified)
Linted and formatted
Documented (where applicable)

🤖 AI Disclosure

I acknowledge that an LLM was used in the creation of this Pull Request, in accordance with Hatchet's AI_POLICY.md.

Details: [e.g. generating tests, writing docs]

vercel · 2026-07-01T10:11:13Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hatchet-docs	Ready	Preview, Comment	Jul 9, 2026 1:56pm

github-actions · 2026-07-01T11:21:00Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=false). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-01T12:17:44Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=true). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-01T12:18:11Z

⚠️ Optional test failure: The old-engine-new-sdk (TypeScript) job failed on this PR. This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-01T12:20:45Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=false). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-01T12:26:03Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=false). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-08T11:27:44Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=false). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

mrkaye97

I left some small comments, but generally this looks good.

One thing I'm a bit nervous about is polluting the frontend with more conditional rendering based on this state, but I'm not sure of other ways around it, unfortunately

mrkaye97 · 2026-07-08T14:21:29Z

 }

-func (a *AuthZ) authorizeTenantOperations(tenantMemberRole sqlcv1.TenantMemberRole, r *middleware.RouteInfo) error {
+func (a *AuthZ) authorizeTenantOperations(roleName string, r *middleware.RouteInfo) error {


what's the reason for this change?

we now have an internal-only NOAUTH role which does not conform to a sqlcv1.TenantMemberRole anymore

mrkaye97 · 2026-07-08T14:27:34Z

 	configLoader := loader.NewConfigLoader(configDirectory)

-	cleanup, server, err := configLoader.CreateServerFromConfig("", func(scf *server.ServerConfigFile) {
+	cleanup, srv, err := configLoader.CreateServerFromConfig("", func(scf *server.ServerConfigFile) {


nit, but do we need this naming change? imo, server is more clear than srv

so I chose to do this since the package name is also server and it was confusing me while I was revisiting this code 😅

github-actions · 2026-07-08T15:26:20Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=false). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-08T22:25:15Z

⚠️ Optional test failure: The old-engine-new-sdk (Python) job failed on this PR. This check is non-mandatory and does not block merging, but may be worth investigating. View logs

… containers (#4382)

github-actions · 2026-07-09T11:37:36Z

⚠️ Optional test failure: The old-engine-new-sdk (Python) job failed on this PR. This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-09T11:37:39Z

⚠️ Optional test failure: The old-engine-new-sdk (Python) job failed on this PR. This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-09T12:06:15Z

⚠️ Optional test failure: The old-engine-new-sdk (Python) job failed on this PR. This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-09T12:48:03Z

⚠️ Optional test failure: The old-engine-new-sdk (Python) job failed on this PR. This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-09T13:57:05Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=true). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-09T14:05:54Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=true). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

github-actions · 2026-07-09T14:05:59Z

⚠️ Optional test failure: The load-deadlock job failed on this PR (optimistic-scheduling=false). This check is non-mandatory and does not block merging, but may be worth investigating. View logs

mnafees added 2 commits July 1, 2026 12:06

initial commit for no-auth local mode

c1ce69f

no-auth authz

e0eb1c0

mnafees self-assigned this Jul 1, 2026

github-actions Bot added the engine Related to the core Hatchet engine label Jul 1, 2026

mnafees changed the title ~~initial commit for no-auth local mode~~ feat: local no-auth mode Jul 1, 2026

vercel Bot deployed to Preview July 1, 2026 10:14 View deployment

CLI and docs

31afe32

github-actions Bot added documentation Improvements or additions to documentation dashboard Related to the Hatchet dashboard labels Jul 1, 2026

vercel Bot deployed to Preview July 1, 2026 11:11 View deployment

mnafees added 2 commits July 1, 2026 14:04

fix build error

62f1aaf

error boundary

afeb5fb

mnafees commented Jul 1, 2026

View reviewed changes

Comment thread api/v1/server/authn/middleware.go Outdated

vercel Bot deployed to Preview July 1, 2026 12:08 View deployment

documentation changes

9e16f52

mnafees added the cli Related to the Hatchet CLI label Jul 1, 2026

mnafees requested a review from abelanger5 July 1, 2026 12:15

mnafees marked this pull request as ready for review July 1, 2026 12:15

vercel Bot deployed to Preview July 1, 2026 12:17 View deployment

mnafees added 3 commits July 2, 2026 11:48

local keyset

ad36f41

Merge branch 'main' into nafees/local-no-auth

b398a8d

no auth keyset in hatchet lite + docs

3160acb

vercel Bot deployed to Preview July 2, 2026 10:16 View deployment

rm stale file

1b90b11

mrkaye97 approved these changes Jul 8, 2026

View reviewed changes

mnafees added 2 commits July 8, 2026 17:02

Merge branch 'main' into nafees/local-no-auth

819c13c

resolve PR comments

305d709

vercel Bot deployed to Preview July 8, 2026 15:17 View deployment

abelanger5 approved these changes Jul 8, 2026

View reviewed changes

Merge branch 'main' into nafees/local-no-auth

ed7d836

vercel Bot deployed to Preview July 8, 2026 22:12 View deployment

mnafees added 2 commits July 9, 2026 13:20

chore: make sure we are only building stripped go binaries for Docker…

54b76a4

… containers (#4382)

Merge branch 'main' into nafees/local-no-auth

ed9477f

update docs

07c3852

vercel Bot deployed to Preview July 9, 2026 11:53 View deployment

update docs and build dashboard-dev images as well

d5c467e

vercel Bot deployed to Preview July 9, 2026 12:35 View deployment

abelanger5 approved these changes Jul 9, 2026

View reviewed changes

Merge branch 'main' into nafees/local-no-auth

a327291

vercel Bot deployed to Preview July 9, 2026 13:48 View deployment

build all 5 images authdisabled in PR CI

7e954e8

vercel Bot deployed to Preview July 9, 2026 13:56 View deployment

mnafees merged commit 160cb92 into main Jul 9, 2026
67 of 69 checks passed

mnafees deleted the nafees/local-no-auth branch July 9, 2026 14:05

Uh oh!

Conversation

mnafees commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Type of change

What's Changed

Checklist

Uh oh!

vercel Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

mrkaye97 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

mrkaye97 Jul 8, 2026

Choose a reason for hiding this comment

Uh oh!

mnafees Jul 8, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

mrkaye97 Jul 8, 2026

Choose a reason for hiding this comment

Uh oh!

mnafees Jul 8, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

mnafees commented Jul 1, 2026 •

edited

Loading

vercel Bot commented Jul 1, 2026 •

edited

Loading