S3 compatibility and openapi spec.

auth/service.go

@@ -178,8 +178,6 @@ func (s *Service) AuthenticateRequest(r *http.Request) (RequestContext, error) {
 		authType = "sigv4-presign"
 	}
 
-	// Admin API authorization is enforced in admin handlers (bootstrap-only).
-	// We still require valid SigV4 credentials here, but skip S3 action policy checks.
 	if strings.HasPrefix(r.URL.Path, "/_admin/") {
 		return RequestContext{
 			Authenticated: true,