fix: Fix Authorization header value for unauthenticated users

[anton-bcgov]

Description

Fix Authorization header value for unauthenticated users

Before: Bearer undefined
After: Bearer

Why this is important

Before, on every unauthenticated request Keycloak was trying to decode the string "undefined" as a valid token and, of course, failed every time and never passed the AuthGuard.

When the token is empty, Keycloak skips the decoding part. In turn, this lets us set up public routes/queries like this:

  @Query(() => null, { name: 'testQuery' })
  @Unprotected(false) // in this context, `false` means "don't skip authentication if token is on the headers"
  async testQuery(@AuthenticatedUser() user) {
    // this logs undefined for unauthenticated users
    // and the decoded token value for authenticated users
    console.log(user);
  }

This means we can reuse the same query for both authenticated and unauthenticated experiences, but change how they are processed by the service. More context here

---

Thanks for the PR!

Deployments, as required, will be available below:

• Backend
• Frontend

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow