fix(backend): Avoid falling back to default user unless ENABLED_AUTH is set to False

[majdyz]

https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/autogpt_libs/autogpt_libs/auth/depends.py#L18-L20

This code falls back to the default admin user when the payload is empty, which definite is not intentional.

Changes 🏗️

Refactor DEFAULT_USER_ID fallback logic into a single location, and add config check for fallback.

Checklist 📋

For code changes:

• I have clearly listed my changes in the PR description
• I have made a test plan
• I have tested my changes according to the test plan:
  • ...

Example test plan

• Create from scratch and execute an agent with at least 3 blocks
• Import an agent from file upload, and confirm it executes correctly
• Upload agent to marketplace
• Import an agent from marketplace and confirm it executes correctly
• Edit an agent from monitor, and confirm it executes correctly

For configuration changes:

• .env.example is updated or already compatible with my changes
• docker-compose.yml is updated or already compatible with my changes
• I have included a list of my configuration changes in the PR description (under Changes)

Examples of configuration changes

• Changing ports
• Adding new services that need to communicate with each other
• Secrets or environment variable changes
• New or infrastructure changes such as databases

[qodo-merge-pro]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 Security concerns Authentication bypass: The code changes modify authentication logic to check ENABLE_AUTH flag before falling back to default admin user. While this improves security, verify that ENABLE_AUTH cannot be accidentally disabled through configuration or environment variables, as this would grant admin access to unauthenticated users.

⚡ Recommended focus areas for review Auth Logic Verify that the new authentication logic with ENABLE_AUTH check properly handles all edge cases and doesn't accidentally allow unauthorized access Error Handling The error handling for websocket authentication could be improved by adding logging of failed authentication attempts

[netlify]

✅ Deploy Preview for auto-gpt-docs ready!

Name	Link
🔨 Latest commit	ddeff7c
🔍 Latest deploy log	https://app.netlify.com/sites/auto-gpt-docs/deploys/673b32463ee8f000083906b5
😎 Deploy Preview	https://deploy-preview-8691--auto-gpt-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[netlify]

✅ Deploy Preview for auto-gpt-docs canceled.

Name	Link
🔨 Latest commit	ac01394
🔍 Latest deploy log	https://app.netlify.com/sites/auto-gpt-docs/deploys/673b39b6fe9fb4000845a896