Feature In Progress - Add no access page

[dynamictulip]

Changes the auth processes in FIAT to allow unauthorised users to be redirected to a "No Access" page.

User Story 135671: Build: Authentication - Add access-denied screen

Changes

No Access specific changes

• Add ADR about "No Access" page
• Create authorised FIAT user role and add role requirement to authorisation
• Add no access page and add redirect logic (described in ADR)
• Hide header and footer areas not accessible to users without FIAT access
• Make cookies, accessibility statement and privacy notice pages accessible to users without FIAT access
• Update MockHttpContext to have separate cookie mocks and to mock user authentication state

Other changes:

• Fix Privacy page having incorrect width
• Move EnvironmentExtensions.cs into the Extensions folder
• Change SameSite setting for the login cookie to current Microsoft recommendation of Lax
• Move FIAT cookie names to static config class
• Update name of cookie consent cookie to be consistent with application name and what is displayed in the Cookie UI

(This was a long running piece of work with change of direction which originally touched these areas)

Screenshots of UI changes

New "No Access" page

Header changes

Authorised user (No change)

Unauthorised user

Footer changes

Authorised user (No change)

Unauthorised user

Checklist

• Pull request attached to the appropriate user story in Azure DevOps
• ADR decision log updated (if needed)
• Release notes added to CHANGELOG.md
• Testing complete - all manual and automated tests pass

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[dynamictulip]

Archived branch to pick up in future - archive/add-no-access-page