fixes vol2

app.py

@@ -126,7 +126,7 @@ def custom_openapi():
     
     # Add Bearer token security scheme
     openapi_schema["components"]["securitySchemes"] = {
-        "bearerAuth": {
+        "HTTPBearer": {
             "type": "http",
             "scheme": "bearer",
             "bearerFormat": "JWT",
@@ -134,6 +134,15 @@ def custom_openapi():
         }
     }
     
+    # Apply security to protected endpoints
+    for path, path_item in openapi_schema["paths"].items():
+        for method, operation in path_item.items():
+            if method.lower() in ["get", "post", "put", "patch", "delete"]:
+                # Apply security to all endpoints except public ones
+                if not (path.endswith("/info") or path.endswith("/health") or path == "/" or path.endswith("/openapi.json") or path.endswith("/docs") or path.endswith("/redoc")):
+                    # Check if the operation has dependencies that include authentication
+                    operation["security"] = [{"HTTPBearer": []}]
+    
     app.openapi_schema = openapi_schema
     return app.openapi_schema
 

interfaces/api/dependencies.py

@@ -1,7 +1,7 @@
-# interfaces/api/dependencies.py
 """FastAPI dependency injection configuration."""
 from typing import Annotated, Optional
 from fastapi import Depends, UploadFile, Form, HTTPException, Request, Header
+from fastapi.security import HTTPBearer
 from pydantic import BaseModel, Field, validator
 import re
 
@@ -9,6 +9,9 @@ from application.use_cases.container import UseCaseContainer
 from infrastructure.services.container import ServiceContainer
 from infrastructure.services.jwt_validation_service import JWTValidationService
 
+# Create HTTPBearer scheme that will be recognized by OpenAPI
+bearer_scheme = HTTPBearer(auto_error=False)
+
 class ExtractionRequest(BaseModel):
     """Request model for audio extraction."""
     output_format: str = Field(default="mp3", description="Output audio format")
@@ -57,13 +60,13 @@ async def validate_video_file(video: UploadFile) -> UploadFile:
     return video
 
 async def validate_bearer_token(
-    authorization: Optional[str] = Header(None, description="Bearer token for authentication")
+    credentials = Depends(bearer_scheme)
 ) -> str:
     """
     Extract and validate bearer token from Authorization header.
     
     Args:
-        authorization: Authorization header value
+        credentials: HTTPAuthorizationCredentials from HTTPBearer scheme
         
     Returns:
         str: The validated bearer token
@@ -76,23 +79,15 @@ async def validate_bearer_token(
     if not settings.enforce_authentication:
         return "authentication-disabled"
     
-    if not authorization:
+    if not credentials:
         raise HTTPException(
             status_code=401,
             detail="Missing Authorization header",
             headers={"WWW-Authenticate": "Bearer"}
         )
     
-    # Check if it starts with "Bearer "
-    if not authorization.startswith("Bearer "):
-        raise HTTPException(
-            status_code=401,
-            detail="Invalid Authorization header format. Expected: Bearer <token>",
-            headers={"WWW-Authenticate": "Bearer"}
-        )
-    
-    # Extract token
-    token = authorization[7:]  # Remove "Bearer " prefix
+    # Extract token from credentials
+    token = credentials.credentials
     if not token:
         raise HTTPException(
             status_code=401,

interfaces/api/routes/extraction_routes.py

@@ -1,7 +1,6 @@
 """Audio extraction API routes."""
-from fastapi import APIRouter, BackgroundTasks, UploadFile, Form, HTTPException, Security
+from fastapi import APIRouter, BackgroundTasks, UploadFile, Form, HTTPException
 from fastapi.responses import JSONResponse
-from fastapi.security import HTTPBearer
 from dataclasses import asdict
 from typing import Optional
 
@@ -17,9 +16,6 @@ from domain.exceptions.domain_exceptions import (
 
 router = APIRouter()
 
-# Security scheme for OpenAPI documentation
-security = HTTPBearer()
-
 @router.post("/extract", 
             response_model=JobCreatedResponse,
             summary="Extract Audio from Video",
@@ -31,7 +27,7 @@ security = HTTPBearer()
             All files are processed asynchronously and return a job ID for tracking progress.
             Use the job status endpoint to check processing status and download the result when complete.
             """,
-            dependencies=[Security(security)],
+
             responses={
                 202: {
                     "description": "Job created for async processing",

interfaces/api/routes/job_routes.py

@@ -1,7 +1,6 @@
 """Job management API routes."""
-from fastapi import APIRouter, HTTPException, Path, Query, BackgroundTasks, Security
+from fastapi import APIRouter, HTTPException, Path, Query, BackgroundTasks
 from fastapi.responses import FileResponse
-from fastapi.security import HTTPBearer
 from typing import Any, Optional
 import logging
 
@@ -17,14 +16,10 @@ from domain.exceptions.domain_exceptions import (
 router = APIRouter()
 logger = logging.getLogger(__name__)
 
-# Security scheme for OpenAPI documentation
-security = HTTPBearer()
-
 @router.get("/jobs/{job_id}", 
            response_model=JobStatusResponse,
            summary="Get Job Status",
            description="Check the status of an audio extraction job. **Authentication Required**: This endpoint requires a valid JWT Bearer token.",
-           dependencies=[Security(security)],
            responses={
                200: {"description": "Job status retrieved successfully"},
                401: {"description": "Authentication required", "content": {"application/json": {"example": {"error": "Authentication required", "code": "AUTHENTICATION_ERROR"}}}},
@@ -93,7 +88,6 @@ async def get_job_status(
            If only start is provided, audio from start time to the end is returned.
            If only end is provided, audio from beginning to end time is returned.
            """,
-           dependencies=[Security(security)],
            responses={
                200: {
                    "description": "Audio file",