Authentication middleware logs every request attempt to console, creating excessive noise during bulk uploads and crawler traffic. This adds a configuration flag to control auth logging verbosity.

Changes

Configuration

• Added AuthVerbose bool field to Options struct (default: false)
• Environment variable: SERVICE_AUTH_VERBOSE
• Command-line flag: --auth-verbose

Implementation

• Updated all auth middleware functions (EmbAPIKeyAdminAuth, EmbAPIKeyOwnerAuth, EmbAPIKeyReaderAuth, EmbAPIKeyEditorAuth, AuthTermination) to accept *models.Options parameter
• Wrapped 18 authentication log statements with conditional checks: if options.AuthVerbose { fmt.Print(...) }
• Handler functions (handleProjectReaderAuth, handleDefinitionReaderAuth, etc.) now pass options parameter

Documentation

• Updated template.env, configuration guides, and environment variable reference
• Included usage examples for development (verbose) and production (quiet) scenarios

Example

# Production: quiet by default
SERVICE_AUTH_VERBOSE=false  # No auth logs
SERVICE_DEBUG=false

# Development: verbose for debugging
SERVICE_AUTH_VERBOSE=true   # Logs all auth attempts
SERVICE_DEBUG=true

Before (always logs):

    Owner authentication successful: sal
    Reader auth for owner=bob project=test...
    Authentication failed.

After (logs only when SERVICE_AUTH_VERBOSE=true).

Backward Compatibility

Default is false (quiet mode), providing cleaner logs for existing deployments without configuration changes.

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.