flag to disable api auth

[vigneshrajsb]

What

api auth behind a flag to disable auth if preferred

[Copilot]

Pull Request Overview

This PR introduces a configuration flag to make API authentication optional. When requireAuth is set to false, the system bypasses API key validation and rate limiting entirely.

• Adds a requireAuth boolean flag to the API configuration with a default value of false
• Modifies authentication validation to skip checks when authentication is disabled
• Updates middleware to only validate API key format when provided, rather than requiring it

Reviewed Changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
src/server/services/types/globalConfig.ts	Adds requireAuth boolean field to ApiConfig type
src/server/services/auth.ts	Sets default requireAuth value to false in DEFAULT_API_CONFIG
src/server/lib/auth/validate.ts	Implements early return in validateAuth when requireAuth is false
src/pages/api/v1/admin/api-keys/index.ts	Conditionally applies bootstrap token validation based on requireAuth flag
src/middleware.ts	Makes API key presence optional in middleware validation

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}