feat(auth): add public endpoint handling in auth middleware

The authentication middleware now skips authentication for specified public endpoints, allowing requests to these endpoints to bypass token checks. This change improves the flexibility of the middleware by enabling unauthenticated access where necessary. The process time for requests to public endpoints is still measured and included in the response headers.

This update ensures that the application can handle both public and protected routes more efficiently.

main.py

@@ -15,8 +15,19 @@ security = HTTPBearer()
 # Context variable to store the token
 token_context = ContextVar('token', default=None)
 
+# Liste des endpoints qui ne nécessitent pas d'authentification
+PUBLIC_ENDPOINTS = {"/"}
+
 @app.middleware("http")
 async def auth_middleware(request: Request, call_next):
+    # Skip authentication for public endpoints
+    if request.url.path in PUBLIC_ENDPOINTS:
+        start_time = time.perf_counter()
+        response = await call_next(request)
+        process_time = time.perf_counter() - start_time
+        response.headers["X-Process-Time"] = str(process_time)
+        return response
+    
     try:
         auth_header = request.headers.get('Authorization')
         if not auth_header: