Make it possible to disable authentication and authorization for only running the backend

[Christdej]

Describe the improvement you would like to see
This will make it easier to run for people outside Equinor and easier to run in integration tests.

Make
builder.Services .AddAuthentication
Configurable

Make
builder.Services.AddAuthorizationBuilder().AddFallbackPolicy( "RequireAuthenticatedUser", policy => policy.RequireAuthenticatedUser() );
Configurable

Make
app.UseAuthentication(); app.UseAuthorization();
Configurable

Investigate how the decorator [Authorize(Roles = Role.Admin)] works when auth is disabled
Investigate how not having: "AzureAd": { "TenantId": "3aa4a235-b6e2-48d5-9195-7fcf05b459b0", "Instance": "https://login.microsoftonline.com" }, in the appsettings works.

How will this improvement affect the current Threat Model?
If set up wrong can increase the risk of starting with app without authorization and that can give unwanted access to resources.

[aeshub]

This issue has automatically been marked as stale as there has been no activity for 60 days.

[tsundvoll]

Consider implementing / providing an openly available authentication provider with documentation for how to use it. In order for open source contributions to take place.

[aeshub]

This issue has automatically been marked as stale as there has been no activity for 60 days.

[aeshub]

This issue has automatically been marked as stale as there has been no activity for 60 days.