common middlewre for /api/v1

app/api/deps.py

@@ -2,9 +2,8 @@ from __future__ import annotations
 
 from typing import Any, Dict, Optional, Tuple
 
-from fastapi import Depends, Request
+from fastapi import Request
 
-from app.core.security import require_api_key
 from app.services.auth_service import AuthService
 from app.services.converter_service import ConverterService
 from app.services.database_service import DatabaseService
@@ -60,10 +59,6 @@ def get_scheduler_service() -> SchedulerService:
     return _scheduler_service
 
 
-def require_auth(token: str = Depends(require_api_key)) -> str:
-    return token
-
-
 def get_redis_scripts(request: Request) -> Tuple[Optional[Any], Dict[str, str]]:
     """Extract Redis client and Lua scripts from app state.
 

app/api/server.py

@@ -22,6 +22,21 @@ from app.services.vector_store_service import VectorStoreService
 _logger = get_logger(__name__)
 _settings = get_settings()
 
+# Public /api/v1/ paths that do not require authentication
+_PUBLIC_API_PREFIXES = (
+    "/api/v1/auth/register",
+    "/api/v1/auth/login",
+    "/api/v1/auth/refresh",
+    "/api/v1/auth/forgot-password",
+    "/api/v1/auth/reset-password",
+    "/api/v1/url-shortener/",
+)
+
+
+def _is_public_path(path: str) -> bool:
+    return path.startswith(_PUBLIC_API_PREFIXES)
+
+
 _embedding_service: EmbeddingService = EmbeddingService()
 _vector_store_service: VectorStoreService = VectorStoreService(_embedding_service)
 _scheduler_service: SchedulerService = SchedulerService()
@@ -144,6 +159,26 @@ def create_application() -> FastAPI:
                         )
         return await call_next(request)
 
+    @app.middleware("http")
+    async def auth_middleware(request: Request, call_next):
+        path = request.url.path
+        if path.startswith("/api/v1/") and not _is_public_path(path):
+            auth_header = request.headers.get("Authorization", "")
+            if not auth_header.startswith("Bearer "):
+                from starlette.responses import JSONResponse
+                return JSONResponse(
+                    status_code=401,
+                    content={"success": False, "detail": "Missing Authorization header"},
+                )
+            token = auth_header.removeprefix("Bearer ")
+            if token != _settings.api_key:
+                from starlette.responses import JSONResponse
+                return JSONResponse(
+                    status_code=401,
+                    content={"success": False, "detail": "Invalid API key"},
+                )
+        return await call_next(request)
+
     app.include_router(api_v1_router, prefix="/api/v1")
 
     @app.get("/", include_in_schema=False)

app/api/v1/batch.py

@@ -13,7 +13,6 @@ from app.api.deps import (
     get_converter_service,
     get_extraction_service,
     get_text_cleaner_service,
-    require_auth,
 )
 from app.api.v1.convert import _build_metadata, _thread_pool
 from app.config import get_settings
@@ -64,7 +63,6 @@ async def batch_files(
     return_json: bool = Form(False),
     clean_content: bool = Query(False),
     mappings: Optional[str] = Form(None, description="JSON string with field mappings"),
-    token: str = Depends(require_auth),
     converter_service: ConverterService = Depends(get_converter_service),
     extraction_service: ExtractionService = Depends(get_extraction_service),
     text_cleaner_service: TextCleanerService = Depends(get_text_cleaner_service),
@@ -145,7 +143,6 @@ async def batch_files(
 async def batch_urls(
     body: BatchUrlRequest,
     clean_content: bool = Query(False),
-    token: str = Depends(require_auth),
     converter_service: ConverterService = Depends(get_converter_service),
     extraction_service: ExtractionService = Depends(get_extraction_service),
     text_cleaner_service: TextCleanerService = Depends(get_text_cleaner_service),

app/api/v1/chat.py

@@ -8,7 +8,7 @@ from typing import Any, AsyncGenerator, Dict, List, Optional
 from fastapi import APIRouter, Depends, HTTPException, Request
 from fastapi.responses import StreamingResponse
 
-from app.api.deps import get_redis_scripts, require_auth
+from app.api.deps import get_redis_scripts
 from app.services.chat_service import _stream_chat_completion, chat_completion
 from app.utils.schema_utils import validate_response_format
 
@@ -61,7 +61,6 @@ async def _stream_events(
 async def create_chat_completion(
     body: Dict[str, Any],
     request: Request,
-    token: str = Depends(require_auth),
 ):
     start = time.monotonic()
     req_id = hex(int(time.time() * 1_000_000))[-8:]

app/api/v1/code_executor.py

@@ -5,7 +5,6 @@ from typing import Optional
 
 from fastapi import APIRouter, Depends
 
-from app.api.deps import require_auth
 from app.core.logger import get_logger
 from app.models.schemas import (
     CodeExecutionItemResult,
@@ -34,7 +33,6 @@ def get_executor() -> CodeExecutorService:
 )
 async def execute_code(
     body: CodeExecutionRequest,
-    token: str = Depends(require_auth),
     executor: CodeExecutorService = Depends(get_executor),
 ) -> CodeExecutionResponse:
     _logger.info("Code execution request: items=%s", len(body.items))

app/api/v1/convert.py

@@ -23,7 +23,6 @@ from app.api.deps import (
     get_converter_service,
     get_extraction_service,
     get_text_cleaner_service,
-    require_auth,
 )
 from app.config import get_settings
 from app.core.logger import get_logger
@@ -149,7 +148,6 @@ async def convert_file(
     mappings: Optional[str] = Form(None, description="JSON string with field mappings"),
     json_schema: Optional[str] = Form(None, description="JSON Schema for AI-based structured extraction"),
     schema_name: str = Form("extraction", description="Name for the JSON Schema"),
-    token: str = Depends(require_auth),
     converter_service: ConverterService = Depends(get_converter_service),
     extraction_service: ExtractionService = Depends(get_extraction_service),
     text_cleaner_service: TextCleanerService = Depends(get_text_cleaner_service),
@@ -216,7 +214,6 @@ async def convert_file(
 async def convert_url(
     body: UrlRequest,
     clean_content: bool = Query(False),
-    token: str = Depends(require_auth),
     converter_service: ConverterService = Depends(get_converter_service),
     extraction_service: ExtractionService = Depends(get_extraction_service),
     text_cleaner_service: TextCleanerService = Depends(get_text_cleaner_service),

app/api/v1/csv_analysis.py

@@ -3,10 +3,10 @@ from __future__ import annotations
 import json
 from typing import Annotated, Any, Dict, List, Optional
 
-from fastapi import APIRouter, Depends, File, Form, HTTPException, Request, UploadFile
+from fastapi import APIRouter, File, Form, HTTPException, Request, UploadFile
 from pydantic import BaseModel, ValidationError
 
-from app.api.deps import get_redis_scripts, require_auth
+from app.api.deps import get_redis_scripts
 from app.config import get_settings
 from app.services.chat_service import chat_completion
 from app.services.csv_analysis_service import (
@@ -32,7 +32,7 @@ class _AIResponse(BaseModel):
     visualization: List[_VisualizationBlock] = []
     message: str = ""
 
-router = APIRouter(dependencies=[Depends(require_auth)])
+router = APIRouter()
 _settings = get_settings()
 _MAX_UPLOAD_BYTES = _settings.max_upload_bytes
 

app/api/v1/database.py

@@ -4,7 +4,6 @@ from typing import Annotated
 
 from fastapi import APIRouter, Depends, HTTPException, status
 
-from app.api.deps import require_auth
 from app.core.logger import get_logger
 from app.models.schemas import (
     DatabaseQueryRequest,
@@ -25,7 +24,6 @@ _logger = get_logger(__name__)
 )
 async def validate_database(
     body: DatabaseValidateRequest,
-    token: Annotated[str, Depends(require_auth)],
     db_service: Annotated[DatabaseService, Depends()] = None,
 ) -> DatabaseValidateResponse:
     if db_service is None:
@@ -48,7 +46,6 @@ async def validate_database(
 )
 async def execute_database_query(
     body: DatabaseQueryRequest,
-    token: Annotated[str, Depends(require_auth)],
     db_service: Annotated[DatabaseService, Depends()] = None,
 ) -> DatabaseQueryResponse:
     if db_service is None:

app/api/v1/embeddings.py

@@ -5,7 +5,7 @@ import time
 
 from fastapi import APIRouter, Depends, HTTPException
 
-from app.api.deps import get_embeddings_service, require_auth
+from app.api.deps import get_embeddings_service
 from app.config import get_settings
 from app.core.logger import get_logger
 from app.core.thread_pool import thread_pool as _thread_pool
@@ -22,7 +22,6 @@ _settings = get_settings()
 )
 async def create_embeddings(
     body: EmbeddingRequest,
-    token: str = Depends(require_auth),
     embedding_service: EmbeddingService = Depends(get_embeddings_service),
 ) -> EmbeddingResponse:
     _logger.info("Embedding request: dim=%s, items=%s", body.dimension, len(body.content))

app/api/v1/google_maps.py

@@ -5,7 +5,6 @@ from typing import Any, Optional
 
 from fastapi import APIRouter, Depends, Header, Query, Response
 
-from app.api.deps import require_auth
 from app.core.logger import get_logger
 from app.models.schemas import (
     GoogleAutocompleteMatchedSubstring,
@@ -231,7 +230,6 @@ def _build_autocomplete_predictions_legacy(data: dict) -> list[GoogleAutocomplet
 async def place_autocomplete(
     body: GooglePlaceAutocompleteRequest,
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -271,7 +269,6 @@ async def place_autocomplete_get(
     strictbounds: Optional[bool] = Query(None),
     sessiontoken: Optional[str] = Query(None),
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -295,7 +292,6 @@ async def place_autocomplete_get(
 async def query_autocomplete(
     body: GoogleQueryAutocompleteRequest,
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -325,7 +321,6 @@ async def query_autocomplete_get(
     radius: Optional[int] = Query(None, ge=1, le=50000),
     language: Optional[str] = Query(None, max_length=10),
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -351,7 +346,6 @@ async def query_autocomplete_get(
 async def geocode(
     body: GoogleGeocodeRequest,
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -378,7 +372,6 @@ async def geocode_get(
     language: Optional[str] = Query(None, max_length=10),
     bounds: Optional[str] = Query(None),
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -396,7 +389,6 @@ async def geocode_get(
 async def reverse_geocode(
     body: GoogleReverseGeocodeRequest,
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -423,7 +415,6 @@ async def reverse_geocode_get(
     result_type: Optional[str] = Query(None),
     location_type: Optional[str] = Query(None),
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -449,7 +440,6 @@ async def reverse_geocode_get(
 async def places_search(
     body: GooglePlacesSearchRequest,
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -483,7 +473,6 @@ async def places_search(
 async def places_nearby(
     body: GooglePlacesNearbyRequest,
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -528,7 +517,6 @@ async def places_search_get(
     page_size: Optional[int] = Query(None, ge=1, le=200, description="Number of results per page"),
     min_rating: Optional[float] = Query(None, ge=0.0, le=5.0, description="Minimum rating filter"),
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -565,7 +553,6 @@ async def places_nearby_get(
     page_size: Optional[int] = Query(None, ge=1, le=200, description="Number of results per page"),
     rank_preference: Optional[str] = Query(None, pattern="^(POPULARITY|DISTANCE)$", description="Ranking preference"),
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -593,7 +580,6 @@ async def places_nearby_get(
 async def place_details(
     body: GooglePlaceDetailsRequest,
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -621,7 +607,6 @@ async def place_details_get(
     language: Optional[str] = Query(None, max_length=10),
     fields: Optional[str] = Query(None),
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     start = time.perf_counter()
@@ -645,10 +630,10 @@ async def place_photo(
     max_width_px: int = Query(400, ge=1, le=4800),
     max_height_px: int = Query(400, ge=1, le=4800),
     x_goog_api_key: str = Header(..., alias="X-Goog-Api-Key", description="Your Google API key"),
-    token: str = Depends(require_auth),
     service: GoogleMapsService = Depends(get_maps_service),
 ):
     from app.config import get_settings
+    import json
     import httpx
 
     cfg = get_settings()
@@ -659,9 +644,22 @@ async def place_photo(
     async with httpx.AsyncClient(timeout=cfg.google_maps_timeout, follow_redirects=True) as client:
         resp = await client.get(url, headers=headers, params=params)
         if resp.status_code != 200:
-            error_body = resp.text[:300]
+            # Try to extract a clean error message from the response
+            try:
+                error_body = resp.json()
+                err = error_body.get("error", {})
+                msg = err.get("message", "")
+                if "API key not valid" in msg or err.get("status") == "API_KEY_INVALID":
+                    clean_error = "Invalid Google API key. Please provide a valid API key via the X-Goog-Api-Key header."
+                elif msg:
+                    clean_error = msg.rstrip(".") + "."
+                else:
+                    clean_error = f"Failed to fetch photo (HTTP {resp.status_code})."
+            except Exception:
+                clean_error = f"Failed to fetch photo (HTTP {resp.status_code})."
+
             return Response(
-                content='{"success":false,"error":"HTTP %d: %s"}' % (resp.status_code, error_body),
+                content=json.dumps({"success": False, "error": clean_error}),
                 media_type="application/json",
                 status_code=200,
             )

app/api/v1/json_extract.py

@@ -3,10 +3,9 @@ from __future__ import annotations
 import time
 from typing import Any, Optional
 
-from fastapi import APIRouter, Depends, HTTPException
+from fastapi import APIRouter, HTTPException
 from pydantic import BaseModel, Field
 
-from app.api.deps import require_auth
 from app.core.logger import get_logger
 from app.services.json_service import extract_json
 
@@ -57,7 +56,6 @@ class ExtractJsonResponse(BaseModel):
 )
 async def extract_json_endpoint(
     body: ExtractJsonRequest,
-    token: str = Depends(require_auth),
 ) -> ExtractJsonResponse:
     start = time.perf_counter()
 

app/api/v1/keys_extract.py

@@ -4,10 +4,9 @@ import asyncio
 import time
 from typing import Any, Dict, List, Optional
 
-from fastapi import APIRouter, Depends
+from fastapi import APIRouter
 from pydantic import BaseModel, Field, field_validator
 
-from app.api.deps import require_auth
 from app.core.logger import get_logger
 from app.core.thread_pool import thread_pool
 from app.services.keys_extractor_service import KeysExtractor
@@ -133,7 +132,6 @@ async def _extract_single(body: KeysExtractRequest) -> KeysExtractResponse:
 @router.post(
     "/keys/extract",
     response_model=KeysExtractBatchResponse,
-    dependencies=[Depends(require_auth)],
     tags=["Keys Extractor"],
     summary="Extract values from nested JSON objects (batch of up to 50 requests processed concurrently)",
 )

app/api/v1/qr_decoder.py

@@ -3,10 +3,9 @@ from __future__ import annotations
 import time
 from typing import List, Optional
 
-from fastapi import APIRouter, Depends, File, HTTPException, UploadFile
+from fastapi import APIRouter, File, HTTPException, UploadFile
 from pydantic import BaseModel, Field
 
-from app.api.deps import require_auth
 from app.core.logger import get_logger
 from app.services.qr_decoder_service import QRDecoderService
 
@@ -49,7 +48,6 @@ class QRDecodeResponse(BaseModel):
 )
 async def decode_qr_file(
     file: UploadFile = File(..., description="Image file containing a QR code"),
-    token: str = Depends(require_auth),
 ) -> QRDecodeResponse:
     start = time.perf_counter()
 
@@ -115,7 +113,6 @@ async def decode_qr_file(
 )
 async def decode_qr_url(
     body: QRDecodeUrlRequest,
-    token: str = Depends(require_auth),
 ) -> QRDecodeResponse:
     start = time.perf_counter()
 

app/api/v1/reconcile.py

@@ -7,10 +7,10 @@ import uuid
 from typing import Any, Dict, List, Optional
 
 import aiohttp
-from fastapi import APIRouter, Depends, File, Form, HTTPException, UploadFile
+from fastapi import APIRouter, File, Form, HTTPException, UploadFile
 from pydantic import BaseModel
 
-from app.api.deps import require_auth
+
 from app.config import get_settings
 from app.core.logger import get_logger
 from app.services.reconciliation_service import (
@@ -237,7 +237,6 @@ async def reconcile_files(
     source_10: UploadFile = File(None),
     destination_10: UploadFile = File(None),
     column_mapping_10: Optional[str] = Form(None),
-    token: str = Depends(require_auth),
 ) -> ReconciliationResponse:
     start_time = time.time()
 
@@ -294,7 +293,6 @@ async def reconcile_files(
 )
 async def reconcile_urls(
     body: ReconciliationUrlRequest,
-    token: str = Depends(require_auth),
 ) -> ReconciliationResponse:
     start_time = time.time()
 

app/api/v1/scheduler.py

@@ -4,7 +4,7 @@ from typing import Any
 
 from fastapi import APIRouter, Depends, HTTPException, Query
 
-from app.api.deps import get_scheduler_service, require_auth
+from app.api.deps import get_scheduler_service
 from app.core.logger import get_logger
 from app.services.scheduler_service import (
     SchedulerService,
@@ -36,7 +36,6 @@ def _paginate(items: list[Any], total: int, page: int, page_size: int) -> dict[s
 
 @router.get("/scheduler/status", summary="Get scheduler status")
 async def get_scheduler_status(
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     status = scheduler_service.get_scheduler_status()
@@ -46,7 +45,6 @@ async def get_scheduler_status(
 
 @router.get("/scheduler/metrics", summary="Get scheduler metrics")
 async def get_scheduler_metrics(
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     metrics = await scheduler_service.get_metrics()
@@ -68,7 +66,6 @@ async def get_scheduler_health(
 @router.post("/scheduler/jobs", summary="Create a new scheduled job", status_code=201)
 async def create_job(
     body: dict[str, Any],
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     errors = _validate_job_create(body)
@@ -88,7 +85,6 @@ async def list_jobs(
     tags: str | None = Query(None, description="Comma-separated tags to filter by"),
     page: int = Query(1, ge=1, description="Page number"),
     page_size: int = Query(20, ge=1, le=100, description="Items per page"),
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     tag_list = [t.strip() for t in tags.split(",") if t.strip()] if tags else None
@@ -107,7 +103,6 @@ async def list_jobs(
 @router.get("/scheduler/jobs/{job_id}", summary="Get a scheduled job by ID")
 async def get_job(
     job_id: str,
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     job = await scheduler_service.get_job(job_id)
@@ -120,7 +115,6 @@ async def get_job(
 async def update_job(
     job_id: str,
     body: dict[str, Any],
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     try:
@@ -135,7 +129,6 @@ async def update_job(
 @router.delete("/scheduler/jobs/{job_id}", summary="Delete a scheduled job (soft delete)")
 async def delete_job(
     job_id: str,
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     try:
@@ -148,7 +141,6 @@ async def delete_job(
 @router.delete("/scheduler/jobs/{job_id}/hard", summary="Permanently delete a scheduled job")
 async def hard_delete_job(
     job_id: str,
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     try:
@@ -165,7 +157,6 @@ async def hard_delete_job(
 @router.post("/scheduler/jobs/{job_id}/pause", summary="Pause a scheduled job")
 async def pause_job(
     job_id: str,
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     try:
@@ -180,7 +171,6 @@ async def pause_job(
 @router.post("/scheduler/jobs/{job_id}/resume", summary="Resume a paused job")
 async def resume_job(
     job_id: str,
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     try:
@@ -195,7 +185,6 @@ async def resume_job(
 @router.post("/scheduler/jobs/{job_id}/run", summary="Trigger a job execution immediately")
 async def run_job_now(
     job_id: str,
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     try:
@@ -216,7 +205,6 @@ async def get_job_history(
     job_id: str,
     page: int = Query(1, ge=1, description="Page number"),
     page_size: int = Query(20, ge=1, le=100, description="Items per page"),
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     job = await scheduler_service.get_job(job_id)
@@ -240,7 +228,6 @@ async def get_execution_history(
     page: int = Query(1, ge=1, description="Page number"),
     page_size: int = Query(50, ge=1, le=200, description="Items per page"),
     status: str | None = Query(None, description="Filter by execution status"),
-    token: str = Depends(require_auth),
     scheduler_service: SchedulerService = Depends(get_scheduler_service),
 ):
     history, total = await scheduler_service.get_execution_history(

app/api/v1/scraper.py

@@ -4,7 +4,6 @@ import time
 
 from fastapi import APIRouter, Depends
 
-from app.api.deps import require_auth
 from app.core.logger import get_logger
 from app.models.schemas import (
     ScrapeHealthResponse,
@@ -27,7 +26,6 @@ def get_scraper_service() -> ScraperService:
     summary="Check Scrapling framework health and available fetchers",
 )
 async def scrape_health(
-    token: str = Depends(require_auth),
     svc: ScraperService = Depends(get_scraper_service),
 ) -> ScrapeHealthResponse:
     _logger.info("Scrape health check")
@@ -47,7 +45,6 @@ async def scrape_health(
 )
 async def scrape_extract(
     body: ScrapeRequest,
-    token: str = Depends(require_auth),
     svc: ScraperService = Depends(get_scraper_service),
 ) -> ScrapeResponse:
     _logger.info(

app/api/v1/semantic_router.py

@@ -4,7 +4,7 @@ import time
 
 from fastapi import APIRouter, Depends
 
-from app.api.deps import get_embeddings_service, require_auth
+from app.api.deps import get_embeddings_service
 from app.models.schemas import SemanticRouterRequest, SemanticRouterResponse
 from app.services.embeddings_service import EmbeddingService
 from app.services.semantic_router_service import SemanticRouterService
@@ -19,7 +19,6 @@ router = APIRouter()
 )
 async def route_query(
     body: SemanticRouterRequest,
-    token: str = Depends(require_auth),
     embedding_service: EmbeddingService = Depends(get_embeddings_service),
 ) -> SemanticRouterResponse:
     start = time.perf_counter()

app/api/v1/sql_validator.py

@@ -2,9 +2,8 @@ from __future__ import annotations
 
 import time
 
-from fastapi import APIRouter, Depends
+from fastapi import APIRouter
 
-from app.api.deps import require_auth
 from app.models.schemas import SqlValidationRequest, SqlValidationResponse
 from app.services.sql_validator_service import SqlValidatorService
 
@@ -19,7 +18,6 @@ _service = SqlValidatorService()
 )
 async def validate_sql(
     body: SqlValidationRequest,
-    token: str = Depends(require_auth),
 ):
     start = time.perf_counter()
     result = _service.validate(body.query, body.dialect)

app/api/v1/system.py

@@ -11,7 +11,7 @@ from pathlib import Path
 from fastapi import APIRouter, Depends, File, HTTPException, UploadFile
 from fastapi.responses import StreamingResponse
 
-from app.api.deps import get_extraction_service, require_auth
+from app.api.deps import get_extraction_service
 from app.config import get_settings
 from app.core.constants import (
     ARCHIVE_EXTENSIONS,
@@ -54,9 +54,7 @@ def is_maintenance() -> bool:
 
 
 @router.get("/health", response_model=HealthResponse, summary="Health check")
-async def health(
-    token: str = Depends(require_auth),
-):
+async def health():
     return HealthResponse(
         success=True,
         status="ok",
@@ -67,9 +65,7 @@ async def health(
 
 
 @router.get("/info", response_model=InfoResponse, summary="Server and environment information")
-async def info(
-    token: str = Depends(require_auth),
-):
+async def info():
     return InfoResponse(
         success=True,
         app=_settings.app_name,
@@ -84,9 +80,7 @@ async def info(
 
 
 @router.get("/formats", response_model=SupportedFormatsResponse, summary="List supported file formats")
-async def list_formats(
-    token: str = Depends(require_auth),
-):
+async def list_formats():
     by_category = {
         "documents": [e for e in SUPPORTED_EXTENSIONS if e in DOCUMENT_EXTENSIONS],
         "office": [e for e in SUPPORTED_EXTENSIONS if e in OFFICE_EXTENSIONS],
@@ -107,7 +101,6 @@ async def list_formats(
 
 @router.get("/spacy-labels", response_model=SpacyLabelsResponse, summary="List available spaCy NER labels")
 async def list_spacy_labels(
-    token: str = Depends(require_auth),
     extraction_service: ExtractionService = Depends(get_extraction_service),
 ):
     return SpacyLabelsResponse(
@@ -152,7 +145,7 @@ def _get_data_dir() -> Path:
 
 
 @router.get("/backup", summary="Download a full data backup archive")
-async def download_backup(token: str = Depends(require_auth)):
+async def download_backup():
     data_dir = _get_data_dir()
     if not data_dir.is_dir():
         raise HTTPException(status_code=404, detail="Data directory not found")
@@ -172,7 +165,6 @@ async def download_backup(token: str = Depends(require_auth)):
 @router.post("/backup/restore", summary="Upload and restore a data backup archive")
 async def upload_and_restore(
     file: UploadFile = File(...),
-    token: str = Depends(require_auth),
 ):
     data_dir = _get_data_dir()
     data_dir.mkdir(parents=True, exist_ok=True)
@@ -204,7 +196,7 @@ async def upload_and_restore(
 
 
 @router.post("/maintenance/enable", summary="Enable maintenance mode (blocks write operations)")
-async def enable_maintenance(token: str = Depends(require_auth)):
+async def enable_maintenance():
     global _MAINTENANCE_MODE
     _MAINTENANCE_MODE = True
     lock_path = _maintenance_lock_path()
@@ -218,7 +210,7 @@ async def enable_maintenance(token: str = Depends(require_auth)):
 
 
 @router.post("/maintenance/disable", summary="Disable maintenance mode")
-async def disable_maintenance(token: str = Depends(require_auth)):
+async def disable_maintenance():
     global _MAINTENANCE_MODE
     _MAINTENANCE_MODE = False
     lock_path = _maintenance_lock_path()
@@ -231,7 +223,7 @@ async def disable_maintenance(token: str = Depends(require_auth)):
 
 
 @router.get("/maintenance", summary="Check maintenance mode status")
-async def maintenance_status(token: str = Depends(require_auth)):
+async def maintenance_status():
     lock_path = _maintenance_lock_path()
     source = "off"
     if _MAINTENANCE_MODE:

app/api/v1/token_counter.py

@@ -2,9 +2,8 @@ from __future__ import annotations
 
 import time
 
-from fastapi import APIRouter, Depends
+from fastapi import APIRouter
 
-from app.api.deps import require_auth
 from app.models.domain import count_tokens
 from app.models.schemas import TokenCountRequest, TokenCountResponse
 
@@ -18,7 +17,6 @@ router = APIRouter()
 )
 async def count_text_tokens(
     body: TokenCountRequest,
-    token: str = Depends(require_auth),
 ) -> TokenCountResponse:
     start = time.perf_counter()
     try:

app/api/v1/token_generator.py

@@ -2,9 +2,8 @@ from __future__ import annotations
 
 import time
 
-from fastapi import APIRouter, Depends
+from fastapi import APIRouter
 
-from app.api.deps import require_auth
 from app.models.schemas import (
     TokenGenerateRequest,
     TokenGenerateResponse,
@@ -24,7 +23,6 @@ _service = JWTService()
 )
 async def generate_token(
     body: TokenGenerateRequest,
-    auth: str = Depends(require_auth),
 ) -> TokenGenerateResponse:
     start = time.perf_counter()
     try:
@@ -67,7 +65,6 @@ async def generate_token(
 )
 async def validate_token(
     body: TokenValidateRequest,
-    auth: str = Depends(require_auth),
 ) -> TokenValidateResponse:
     start = time.perf_counter()
     try:

app/api/v1/vector_stores.py

@@ -15,7 +15,7 @@ from fastapi import (
     status,
 )
 
-from app.api.deps import get_vector_store_service, require_auth
+from app.api.deps import get_vector_store_service
 from app.core.logger import get_logger
 from app.models.domain import ConversionError
 from app.models.schemas import (
@@ -61,7 +61,6 @@ async def _process_pdf_bytes(raw: bytes, source: str, clean_content: bool) -> st
 )
 async def create_vector_store(
     body: VectorStoreCreate,
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> VectorStoreResponse:
     store_id = await vector_store_service.create_store(
@@ -88,7 +87,6 @@ async def create_vector_store(
     summary="List all vector stores",
 )
 async def list_vector_stores(
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> VectorStoreListResponse:
     records = vector_store_service.list_stores()
@@ -118,7 +116,6 @@ async def list_vector_stores(
 )
 async def get_vector_store(
     store_id: str,
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> VectorStoreResponse:
     try:
@@ -144,7 +141,6 @@ async def get_vector_store(
 )
 async def delete_vector_store(
     store_id: str,
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> VectorStoreResponse:
     record = vector_store_service.get_store(store_id)
@@ -171,7 +167,6 @@ async def delete_vector_store(
 async def ingest_document(
     store_id: str,
     body: DocumentIngestRequest,
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> DocumentIngestResponse:
     record = vector_store_service.get_store(store_id)
@@ -218,7 +213,6 @@ async def ingest_pdf_document(
     chunk_size: int = Form(512, ge=64, le=4096),
     chunk_overlap: int = Form(64, ge=0, le=512),
     clean_content: bool = Query(True, description="Clean markdown text after PDF conversion"),
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> DocumentIngestResponse:
     record = vector_store_service.get_store(store_id)
@@ -284,7 +278,6 @@ async def ingest_pdf_url(
     store_id: str,
     body: DocumentIngestUrlRequest,
     clean_content: bool = Query(True, description="Clean markdown text after PDF conversion"),
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> DocumentIngestResponse:
     record = vector_store_service.get_store(store_id)
@@ -363,7 +356,6 @@ async def ingest_pdf_url(
 async def search_vector_store(
     store_id: str,
     body: SearchRequest,
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> SearchResponse:
     record = vector_store_service.get_store(store_id)
@@ -408,7 +400,6 @@ async def search_vector_store(
 async def delete_documents(
     store_id: str,
     body: DeleteRequest,
-    token: str = Depends(require_auth),
     vector_store_service: VectorStoreService = Depends(get_vector_store_service),
 ) -> DeleteResponse:
     record = vector_store_service.get_store(store_id)

app/api/v1/web_search.py

@@ -5,7 +5,6 @@ from typing import Optional
 
 from fastapi import APIRouter, Depends, Query
 
-from app.api.deps import require_auth
 from app.core.logger import get_logger
 from app.models.schemas import (
     WebSearchAutocompleteRequest,
@@ -33,7 +32,6 @@ def get_search_service() -> WebSearchService:
 )
 async def web_search_post(
     body: WebSearchRequest,
-    token: str = Depends(require_auth),
     svc: WebSearchService = Depends(get_search_service),
 ) -> WebSearchResponse:
     _logger.info("Web search (POST): q=%s, cat=%s", body.q, body.categories)
@@ -77,7 +75,6 @@ async def web_search_get(
     safesearch: int = Query(0, ge=0, le=2, description="Safe search level"),
     engines: Optional[str] = Query(None, description="Comma-separated engines"),
     max_results: int = Query(10, ge=1, le=50, description="Max results"),
-    token: str = Depends(require_auth),
     svc: WebSearchService = Depends(get_search_service),
 ) -> WebSearchResponse:
     _logger.info("Web search (GET): q=%s, cat=%s", q, categories)
@@ -113,7 +110,6 @@ async def web_search_get(
     summary="Get SearXNG instance configuration (engines, categories, plugins)",
 )
 async def web_search_config(
-    token: str = Depends(require_auth),
     svc: WebSearchService = Depends(get_search_service),
 ) -> WebSearchConfigResponse:
     _logger.info("Web search config request")
@@ -141,7 +137,6 @@ async def web_search_config(
 )
 async def web_search_autocomplete(
     q: str = Query(..., min_length=1, max_length=200, description="Query prefix"),
-    token: str = Depends(require_auth),
     svc: WebSearchService = Depends(get_search_service),
 ) -> WebSearchAutocompleteResponse:
     _logger.info("Web search autocomplete: q=%s", q)
@@ -164,7 +159,6 @@ async def web_search_autocomplete(
 )
 async def web_search_autocomplete_post(
     body: WebSearchAutocompleteRequest,
-    token: str = Depends(require_auth),
     svc: WebSearchService = Depends(get_search_service),
 ) -> WebSearchAutocompleteResponse:
     _logger.info("Web search autocomplete (POST): q=%s", body.q)
@@ -186,7 +180,6 @@ async def web_search_autocomplete_post(
     summary="Get all SearXNG engine descriptions",
 )
 async def web_search_engine_descriptions(
-    token: str = Depends(require_auth),
     svc: WebSearchService = Depends(get_search_service),
 ) -> WebSearchEngineDescriptionsResponse:
     _logger.info("Web search engine descriptions")
@@ -207,7 +200,6 @@ async def web_search_engine_descriptions(
     summary="Get SearXNG instance statistics",
 )
 async def web_search_stats(
-    token: str = Depends(require_auth),
     svc: WebSearchService = Depends(get_search_service),
 ) -> WebSearchStatsResponse:
     _logger.info("Web search stats request")
@@ -227,7 +219,6 @@ async def web_search_stats(
     summary="Check SearXNG instance health",
 )
 async def web_search_health(
-    token: str = Depends(require_auth),
     svc: WebSearchService = Depends(get_search_service),
 ) -> dict:
     _logger.info("Web search health check")

app/api/v1/webhook_socket.py

@@ -6,14 +6,12 @@ import json
 
 from fastapi import (
     APIRouter,
-    Depends,
     HTTPException,
     Request,
     WebSocket,
     WebSocketDisconnect,
 )
 
-from app.api.deps import require_auth
 from app.models.schemas import (
     ChannelCreateRequest,
     ChannelCreateResponse,
@@ -34,7 +32,6 @@ manager = get_manager()
 async def create_channel(
     body: ChannelCreateRequest,
     request: Request,
-    token: str = Depends(require_auth),
 ):
     if body.channel_id and manager.get_channel(body.channel_id):
         raise HTTPException(status_code=409, detail=f"Channel '{body.channel_id}' already exists")
@@ -59,9 +56,7 @@ async def create_channel(
 
 
 @router.get("/channels", response_model=ChannelListResponse, summary="List all webhook channels")
-async def list_channels(
-    token: str = Depends(require_auth),
-):
+async def list_channels():
     channels = []
     for cid, ch in manager.channels.items():
         channels.append(ChannelListItem(
@@ -78,7 +73,6 @@ async def list_channels(
 @router.get("/channels/{channel_id}", response_model=ChannelInfoResponse, summary="Get channel info")
 async def channel_info(
     channel_id: str,
-    token: str = Depends(require_auth),
 ):
     ch = manager.get_channel(channel_id)
     if not ch:
@@ -98,7 +92,6 @@ async def channel_info(
 @router.delete("/channels/{channel_id}", response_model=ChannelDeleteResponse, summary="Delete a channel")
 async def delete_channel(
     channel_id: str,
-    token: str = Depends(require_auth),
 ):
     if manager.delete_channel(channel_id):
         return ChannelDeleteResponse(deleted=channel_id)
@@ -247,7 +240,5 @@ async def websocket_endpoint(
 
 
 @router.get("/webhook-socket/stats", response_model=WebhookSocketStatsResponse, summary="Webhook/socket server stats")
-async def ws_stats(
-    token: str = Depends(require_auth),
-):
+async def ws_stats():
     return manager.stats()

app/services/google_maps_service.py

@@ -63,8 +63,8 @@ class GoogleMapsService:
     async def geocode(self, address: str, region: Optional[str] = None,
                       language: Optional[str] = None, bounds: Optional[str] = None,
                       api_key: Optional[str] = None) -> Dict[str, Any]:
-        if not api_key:
-            raise ValueError("Google API key is missing")
+        if not api_key or not api_key.strip():
+            return {"success": False, "error": "Google API key is missing. Provide a valid API key via the X-Goog-Api-Key header."}
         params: Dict[str, Any] = {
             "address": address,
             "key": api_key,
@@ -82,8 +82,8 @@ class GoogleMapsService:
                               result_type: Optional[str] = None,
                               location_type: Optional[str] = None,
                               api_key: Optional[str] = None) -> Dict[str, Any]:
-        if not api_key:
-            raise ValueError("Google API key is missing")
+        if not api_key or not api_key.strip():
+            return {"success": False, "error": "Google API key is missing. Provide a valid API key via the X-Goog-Api-Key header."}
         params: Dict[str, Any] = {
             "latlng": latlng,
             "key": api_key,
@@ -271,6 +271,20 @@ class GoogleMapsService:
     # Internal — Legacy API (for Geocoding)
     # -----------------------------------------------------------------------
 
+    @staticmethod
+    def _format_legacy_api_error(response: httpx.Response) -> str:
+        """Extract a clean error message from a legacy Geocoding API error response."""
+        try:
+            body = response.json()
+            msg = body.get("error_message", "") or body.get("status", "")
+            if msg:
+                if "invalid" in msg.lower() or "denied" in msg.lower():
+                    return "Invalid Google API key. Please provide a valid API key via the X-Goog-Api-Key header."
+                return msg.rstrip(".") + "."
+        except Exception:
+            pass
+        return f"Geocoding API error (HTTP {response.status_code})."
+
     async def _call_api(self, path: str, params: Dict[str, Any]) -> Dict[str, Any]:
         url = f"{self._base_url}{path}"
         last_error: Optional[str] = None
@@ -287,7 +301,7 @@ class GoogleMapsService:
                 last_error = "Request timed out"
                 _logger.warning("Google Maps API timeout on %s (attempt %d/%d)", path, attempt + 1, 1 + self._max_retries)
             except httpx.HTTPStatusError as e:
-                last_error = f"HTTP {e.response.status_code}: {e.response.text[:500]}"
+                last_error = self._format_legacy_api_error(e.response)
                 _logger.warning("Google Maps API HTTP error on %s: %s (attempt %d/%d)", path, last_error, attempt + 1, 1 + self._max_retries)
                 if 400 <= e.response.status_code < 500:
                     break
@@ -331,13 +345,42 @@ class GoogleMapsService:
     # Internal — Places API (New)
     # -----------------------------------------------------------------------
 
+    @staticmethod
+    def _format_places_api_error(status_code: int, response: httpx.Response) -> str:
+        """Extract a clean, human-readable error message from a Places API error response."""
+        try:
+            error_body = response.json()
+            err = error_body.get("error", {})
+            msg = err.get("message", "") or ""
+            api_status = err.get("status", "")
+
+            # Build a clean message without dumping raw JSON
+            if "API key not valid" in msg or "API_KEY_INVALID" in api_status:
+                return "Invalid Google API key. Please provide a valid API key via the X-Goog-Api-Key header."
+            if "API key expired" in msg or "API_KEY_EXPIRED" in api_status:
+                return "Google API key has expired. Please renew your API key."
+            if status_code == 403:
+                return "Access forbidden. The API key may not have the required APIs enabled."
+            if status_code == 404:
+                return "The requested resource was not found."
+            if status_code == 429:
+                return "API rate limit exceeded. Please wait and retry."
+
+            # Return just the human-readable message, not the raw JSON
+            if msg:
+                return msg.rstrip(".") + "."
+        except Exception:
+            pass
+
+        return f"Google Places API error (HTTP {status_code})."
+
     async def _call_places_api(self, method: str, path: str,
                                body: Optional[Dict[str, Any]] = None,
                                params: Optional[Dict[str, Any]] = None,
                                field_mask: Optional[str] = None,
                                api_key: Optional[str] = None) -> Dict[str, Any]:
-        if not api_key:
-            raise ValueError("Google API key is missing")
+        if not api_key or not api_key.strip():
+            return {"success": False, "error": "Google API key is missing. Provide a valid API key via the X-Goog-Api-Key header."}
         url = f"{self._places_base_url}{path}"
         headers: Dict[str, str] = {
             "X-Goog-Api-Key": api_key,
@@ -360,16 +403,11 @@ class GoogleMapsService:
                         data: Dict[str, Any] = response.json()
                         return {"success": True, "data": data, "error": None}
 
-                    try:
-                        error_body = response.json()
-                        error_msg = error_body.get("error", {}).get("message", response.text[:500])
-                        error_detail = error_body.get("error", {})
-                        _logger.warning("Places API error on %s: status=%s code=%s message=%s",
-                                       path, response.status_code, error_detail.get("code"), error_detail.get("message"))
-                    except Exception:
-                        error_msg = response.text[:500]
-                        _logger.warning("Places API error on %s: HTTP %s body=%s", path, response.status_code, error_msg)
-                    last_error = f"HTTP {response.status_code}: {error_msg}"
+                    last_error = self._format_places_api_error(response.status_code, response)
+                    _logger.warning(
+                        "Places API error on %s: HTTP %s -> %s",
+                        path, response.status_code, last_error,
+                    )
 
                     if response.status_code == 429:
                         backoff = 2.0 ** (attempt + 1)