feat: revert authentication and rate limit

Signed-off-by: Umberto Sgueglia <usgueglia@contractor.linuxfoundation.org>

Author: ulemons

backend/src/api/public/v1/akrites-external/index.ts

@@ -31,10 +31,10 @@ function envTunableRateLimiter(envPrefix: string, defaultMax: number, defaultWin
   })
 }
 
-// Blast-radius jobs default to 5 requests/hour.
+// Blast-radius jobs default to 50 requests/hour.
 const blastRadiusRateLimiter = envTunableRateLimiter(
   'AKRITES_BLAST_RADIUS_RATE_LIMIT',
-  5,
+  50,
   60 * 60 * 1000,
 )
 

backend/src/api/public/v1/index.ts

@@ -43,18 +43,7 @@ export function v1Router(): Router {
   router.use('/ossprey', oauth2Middleware(AUTH0_CONFIG), osspreyRouter())
 
   router.use('/akrites', oauth2Middleware(AUTH0_CONFIG), akritesRouter())
-  // LOCAL-BYPASS-TODO-REVERT: real Auth0 check commented out for a local blast-radius
-  // e2e load test (no easy way to mint a token locally). Restore the line below and
-  // delete the stub before this ever reaches a shared/prod branch.
-  // router.use('/akrites-external', oauth2Middleware(AUTH0_CONFIG), akritesExternalRouter())
-  router.use(
-    '/akrites-external',
-    (req, _res, next) => {
-      req.actor = { id: 'local-load-test', type: 'service', scopes: Object.values(SCOPES) }
-      next()
-    },
-    akritesExternalRouter(),
-  )
+  router.use('/akrites-external', oauth2Middleware(AUTH0_CONFIG), akritesExternalRouter())
 
   router.use(() => {
     throw new NotFoundError()