#9 Major routes refactor and expansion, #15 Added API for statistics, Added search cache backend and functionality tests, Backend sync improvements

internal/server/middleware/token_auth.go

@@ -2,6 +2,7 @@ package middleware
 
 import (
 	"net/http"
+	"os"
 	"strings"
 	"time"
 
@@ -17,6 +18,15 @@ import (
 func TokenAuthMiddleware(pool *pgxpool.Pool) echo.MiddlewareFunc {
 	return func(next echo.HandlerFunc) echo.HandlerFunc {
 		return func(c *echo.Context) error {
+			// Session auth disable bypass - allow all requests through without token validation
+			disableSessionAuth := os.Getenv("DISABLE_SESSION_AUTH") == "true"
+			if disableSessionAuth {
+				logging.GetLogger().Debug("Session auth disabled - bypassing token authentication",
+					zap.String("path", c.Request().URL.Path),
+					zap.String("ip", c.RealIP()))
+				return next(c)
+			}
+
 			// Extract token from Authorization header
 			authHeader := c.Request().Header.Get("Authorization")
 			if authHeader == "" {