proxy auth users don't get a token

otherwise, they will stay logged in even after the proxy auth has
disabled them (with the saved token in the local store)

server/Auth.js

@@ -63,7 +63,7 @@ class Auth {
     }
 
     if (token == null && proxyUsername == null) {
-      Logger.error('Api called without a token and proxy auth is disabled', req.path)
+      Logger.error('Api called without a token and no proxy auth provided', req.path)
       return res.sendStatus(401)
     }
 
@@ -158,6 +158,8 @@ class Auth {
       email,
       type: 'user',
       isActive: true,
+      token: null,
+      isFromProxy: true,
     }
 
     return await this.createUser(account)
@@ -178,7 +180,11 @@ class Auth {
 
     account.pash = await this.hashPass(password)
 
+    // proxy users don't get a token
+    if (!account.isFromProxy) {
       account.token = await this.generateAccessToken({ userId: account.id, username })
+    }
+
     account.createdAt = Date.now()
     const newUser = new User(account)
 

server/objects/user/User.js

@@ -24,6 +24,8 @@ class User {
     this.librariesAccessible = [] // Library IDs (Empty if ALL libraries)
     this.itemTagsSelected = [] // Empty if ALL item tags accessible
 
+    this.isFromProxy = false  // whether the user was authenticated in the proxy layer
+
     if (user) {
       this.construct(user)
     }
@@ -90,7 +92,8 @@ class User {
       createdAt: this.createdAt,
       permissions: this.permissions,
       librariesAccessible: [...this.librariesAccessible],
-      itemTagsSelected: [...this.itemTagsSelected]
+      itemTagsSelected: [...this.itemTagsSelected],
+      isFromProxy: this.isFromProxy,
     }
   }
 
@@ -111,7 +114,8 @@ class User {
       createdAt: this.createdAt,
       permissions: this.permissions,
       librariesAccessible: [...this.librariesAccessible],
-      itemTagsSelected: [...this.itemTagsSelected]
+      itemTagsSelected: [...this.itemTagsSelected],
+      isFromProxy: this.isFromProxy,
     }
     if (minimal) {
       delete json.mediaProgress
@@ -183,6 +187,9 @@ class User {
 
     this.librariesAccessible = [...(user.librariesAccessible || [])]
     this.itemTagsSelected = [...(user.itemTagsSelected || [])]
+
+
+    this.isFromProxy = false
   }
 
   update(payload) {