Function log_auth_status

src/codegraphcontext/api/auth.py:110–123

Log the authentication status at app startup. Emits a prominent WARNING when the API is unauthenticated so the insecure default is impossible to miss in logs.

()

def log_auth_status() -> None:
    """Log the authentication status at app startup.

    Emits a prominent WARNING when the API is unauthenticated so the insecure
    default is impossible to miss in logs.
    """
    if get_configured_api_key():
        logger.info("API key authentication is ENABLED (CGC_API_KEY is set).")
    else:
        logger.warning(
            "⚠️  CodeGraphContext API is running WITHOUT authentication. "
            "Anyone who can reach this server can index code, run Cypher queries "
            "and call tools. Set CGC_API_KEY to require a key."
        )