Show Google sign-in only when enabled

frontend/src/lib/auth.tsx

@@ -2,7 +2,7 @@ import { createClient, type SupabaseClient } from "@supabase/supabase-js";
 import { createContext, useCallback, useContext, useEffect, useState, type ReactNode } from "react";
 import { api, type Profile } from "./api";
 
-type Config = { enabled: boolean; supabase_url: string; supabase_anon_key: string; dev_auth: boolean; calibrated_model: boolean };
+type Config = { enabled: boolean; supabase_url: string; supabase_anon_key: string; dev_auth: boolean; calibrated_model: boolean; providers?: { google?: boolean } };
 
 let supabase: SupabaseClient | null = null;
 let config: Config | null = null;

frontend/src/pages/Auth.tsx

@@ -66,7 +66,7 @@ export default function Auth({ mode }: { mode: "signin" | "signup" }) {
           <p className="mt-6 rounded-xl bg-nile-soft px-4 py-3 text-nile-deep">{notice}</p>
         ) : (
           <form onSubmit={submit} className="mt-8 space-y-4">
-            {config?.supabase_url && (
+            {config?.supabase_url && config.providers?.google && (
               <>
                 <Button type="button" variant="outline" className="w-full" onClick={() => signInWithGoogle().catch((e) => setError(e.message))}>
                   <svg width="18" height="18" viewBox="0 0 48 48" aria-hidden="true"><path fill="#FFC107" d="M43.6 20.5H42V20H24v8h11.3C33.7 32.7 29.2 36 24 36c-6.6 0-12-5.4-12-12s5.4-12 12-12c3.1 0 5.8 1.2 7.9 3.1l5.7-5.7C34 6.1 29.3 4 24 4 12.9 4 4 12.9 4 24s8.9 20 20 20 20-8.9 20-20c0-1.3-.1-2.4-.4-3.5z"/><path fill="#FF3D00" d="M6.3 14.7l6.6 4.8C14.7 15.1 19 12 24 12c3.1 0 5.8 1.2 7.9 3.1l5.7-5.7C34 6.1 29.3 4 24 4 16.3 4 9.7 8.3 6.3 14.7z"/><path fill="#4CAF50" d="M24 44c5.2 0 9.9-2 13.4-5.2l-6.2-5.2C29.2 35.1 26.7 36 24 36c-5.2 0-9.6-3.3-11.3-7.9l-6.5 5C9.5 39.6 16.2 44 24 44z"/><path fill="#1976D2" d="M43.6 20.5H42V20H24v8h11.3c-.8 2.2-2.2 4.2-4.1 5.6l6.2 5.2C37 39.2 44 34 44 24c0-1.3-.1-2.4-.4-3.5z"/></svg>

platform_app/core.py

@@ -56,9 +56,26 @@ def enabled() -> bool:
     return bool(DATABASE_URL)
 
 
+_providers: Dict[str, Any] = {"at": 0.0, "value": {}}
+
+
+def _auth_providers() -> Dict[str, bool]:
+    """Which sign-in providers are switched on in Supabase (cached for 5 minutes)."""
+    if not SUPABASE_URL or time.time() - _providers["at"] < 300:
+        return _providers["value"]
+    try:
+        r = httpx.get(f"{SUPABASE_URL}/auth/v1/settings", headers={"apikey": SUPABASE_ANON_KEY}, timeout=5)
+        ext = r.json().get("external", {}) if r.status_code == 200 else {}
+        _providers["value"] = {"google": bool(ext.get("google"))}
+    except Exception:
+        pass
+    _providers["at"] = time.time()
+    return _providers["value"]
+
+
 def public_config() -> Dict[str, Any]:
     return {"enabled": enabled(), "supabase_url": SUPABASE_URL, "supabase_anon_key": SUPABASE_ANON_KEY,
-            "dev_auth": DEV_AUTH}
+            "dev_auth": DEV_AUTH, "providers": _auth_providers()}
 
 
 # --------------------------------------------------------------------------------------