feat: disable auth guard and fix feedback proxy URL

Author: amaydixit11

echo-server.js

@@ -15,44 +15,8 @@ export class AuthGuard implements CanActivate {
   constructor() {}
 
   async canActivate(context: ExecutionContext): Promise<boolean> {
-    const request = context.switchToHttp().getRequest();
-    const token = this.extractTokenFromHeader(request);
-
-    if (!token) {
-      throw new UnauthorizedException('Missing token');
-    }
-
-    try {
-      // Dynamic import for ESM compatibility in Vercel/CommonJS environment
-      const jose = await import('jose');
-      
-      if (!this.JWKS) {
-        const authUrl = process.env.AUTH_SERVICE_URL || 'https://auth.openlake.in';
-        this.JWKS = jose.createRemoteJWKSet(new URL(`${authUrl}/.well-known/jwks.json`));
-      }
-
-      const { payload } = await jose.jwtVerify(token, this.JWKS, {
-        issuer: process.env.AUTH_ISSUER || 'openlake-auth',
-      });
-
-      // Attach user to request
-      request['user'] = payload;
-
-      // Inject headers for downstream
-      request.headers['x-openlake-user-id'] = payload.sub as string;
-      request.headers['x-openlake-role'] = payload.role as string;
-      request.headers['x-openlake-scopes'] = Array.isArray(payload.scope) 
-        ? payload.scope.join(' ') 
-        : (payload.scope as string || '');
-      
-      // Request ID (Fastify usually has req.id, but let's ensure we propogate it or generate one)
-      request.headers['x-openlake-request-id'] = (request as any).id || crypto.randomUUID();
-
-      return true;
-    } catch (e) {
-      this.logger.error(`Token verification failed: ${e.message}`);
-      throw new UnauthorizedException();
-    }
+    // Authentication has been disabled as per request
+    return true;
   }
 
 

src/auth/auth.guard.ts

@@ -15,7 +15,7 @@ export class FeedbackController {
     try {
       const result = await this.proxy.forward({
         service: 'COSA',
-        url: `${this.COSA_API}/view-feedbacks`,
+        url: `${this.COSA_API}/view-feedback`,
         method: 'GET',
         headers: req.headers,
         params: { ...(req.query as any) },