Introduce new authentication provider Unauthenticated as the default

schemas/dab.draft.schema.json

@@ -390,6 +390,10 @@
                     {
                       "const": "Custom",
                       "description": "Custom authentication provider defined by the user. Use the JWT property to configure the custom provider."
+                    },
+                    {
+                      "const": "Unauthenticated",
+                      "description": "Unauthenticated provider where all operations run as anonymous. Use when Data API builder is behind an app gateway or APIM where authentication is handled externally."
                     }
                   ],
                   "default": "AppService"

src/Cli.Tests/ConfigureOptionsTests.cs

@@ -664,6 +664,7 @@ public void TestUpdateCorsAllowCredentialsHostSettings(bool allowCredentialsValu
         [DataRow("Appservice", DisplayName = "Update authentication.provider to AppService for Host.")]
         [DataRow("azuread", DisplayName = "Update authentication.provider to AzureAD for Host.")]
         [DataRow("entraid", DisplayName = "Update authentication.provider to EntraID for Host.")]
+        [DataRow("Unauthenticated", DisplayName = "Update authentication.provider to Unauthenticated for Host.")]
         public void TestUpdateAuthenticationProviderHostSettings(string authenticationProviderValue)
         {
             // Arrange -> all the setup which includes creating options.

src/Cli.Tests/EndToEndTests.cs

@@ -1121,12 +1121,15 @@ public async Task TestExitOfRuntimeEngineWithInvalidConfig(
     [DataRow("AppService", true)]
     [DataRow("AzureAD", true)]
     [DataRow("EntraID", true)]
+    [DataRow("Unauthenticated", true)]
     public void TestBaseRouteIsConfigurableForSWA(string authProvider, bool isExceptionExpected)
     {
         string[] initArgs = { "init", "-c", TEST_RUNTIME_CONFIG_FILE, "--host-mode", "development", "--database-type", "mssql",
             "--connection-string", SAMPLE_TEST_CONN_STRING, "--auth.provider", authProvider, "--runtime.base-route", "base-route" };
 
-        if (!Enum.TryParse(authProvider, ignoreCase: true, out EasyAuthType _))
+        if (!Enum.TryParse(authProvider, ignoreCase: true, out EasyAuthType _) &&
+            !authProvider.Equals("Unauthenticated", StringComparison.OrdinalIgnoreCase) &&
+            !authProvider.Equals("Simulator", StringComparison.OrdinalIgnoreCase))
         {
             string[] audIssuers = { "--auth.audience", "aud-xxx", "--auth.issuer", "issuer-xxx" };
             initArgs = initArgs.Concat(audIssuers).ToArray();

src/Cli.Tests/InitTests.cs

@@ -301,6 +301,7 @@ public void EnsureFailureOnReInitializingExistingConfig()
         [DataRow("StaticWebApps", null, null, DisplayName = "StaticWebApps with no audience and no issuer specified.")]
         [DataRow("AppService", null, null, DisplayName = "AppService with no audience and no issuer specified.")]
         [DataRow("Simulator", null, null, DisplayName = "Simulator with no audience and no issuer specified.")]
+        [DataRow("Unauthenticated", null, null, DisplayName = "Unauthenticated with no audience and no issuer specified.")]
         [DataRow("AzureAD", "aud-xxx", "issuer-xxx", DisplayName = "AzureAD with both audience and issuer specified.")]
         [DataRow("EntraID", "aud-xxx", "issuer-xxx", DisplayName = "EntraID with both audience and issuer specified.")]
         public Task EnsureCorrectConfigGenerationWithDifferentAuthenticationProviders(

src/Cli.Tests/ModuleInitializer.cs

@@ -85,6 +85,8 @@ public static void Init()
         VerifierSettings.IgnoreMember<RuntimeConfig>(config => config.IsStaticWebAppsIdentityProvider);
         // Ignore the IsAppServiceIdentityProvider as that's unimportant from a test standpoint.
         VerifierSettings.IgnoreMember<RuntimeConfig>(config => config.IsAppServiceIdentityProvider);
+        // Ignore the IsUnauthenticatedIdentityProvider as that's unimportant from a test standpoint.
+        VerifierSettings.IgnoreMember<RuntimeConfig>(config => config.IsUnauthenticatedIdentityProvider);
         // Ignore the RestPath as that's unimportant from a test standpoint.
         VerifierSettings.IgnoreMember<RuntimeConfig>(config => config.RestPath);
         // Ignore the GraphQLPath as that's unimportant from a test standpoint.

src/Cli.Tests/Snapshots/AddEntityTests.AddEntityWithAnExistingNameButWithDifferentCase.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddEntityWithCachingEnabled.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddEntityWithPolicyAndFieldProperties_70de36ebf1478d0d.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddEntityWithPolicyAndFieldProperties_9f612e68879149a3.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddEntityWithPolicyAndFieldProperties_bea2d26f3e5462d8.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddNewEntityWhenEntitiesEmpty.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddNewEntityWhenEntitiesNotEmpty.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddNewEntityWhenEntitiesWithSourceAsStoredProcedure.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddStoredProcedureWithBothMcpProperties.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddStoredProcedureWithBothMcpPropertiesEnabled.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddStoredProcedureWithMcpCustomToolEnabled.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddTableEntityWithMcpDmlTools_mcpDmlTools=false_source=authors.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.AddTableEntityWithMcpDmlTools_mcpDmlTools=true_source=books.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_0c9cbb8942b4a4e5.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_286d268a654ece27.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_3048323e01b42681.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_3440d150a2282b9c.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_381c28d25063be0c.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_458373311f6ed4ed.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_66799c963a6306ae.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_66f598295b8682fd.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_73f95f7e2cd3ed71.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_79d59edde7f6a272.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_7ec82512a1df5293.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_cbb6e5548e4d3535.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_dc629052f38cea32.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_e4a97c7e3507d2c6.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddNewSpWithDifferentRestAndGraphQLOptions_f8d0d0c2a38bd3b8.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/AddEntityTests.TestAddStoredProcedureWithRestMethodsAndGraphQLOperations.verified.txt

@@ -18,7 +18,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/EndToEndTests.TestAddingStoredProcedureWithRestMethodsAndGraphQLOperations.verified.txt

@@ -41,7 +41,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/EndToEndTests.TestConfigGeneratedAfterAddingEntityWithSourceAsStoredProcedure.verified.txt

@@ -41,7 +41,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/EndToEndTests.TestConfigGeneratedAfterAddingEntityWithSourceWithDefaultType.verified.txt

@@ -41,7 +41,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/EndToEndTests.TestConfigGeneratedAfterAddingEntityWithoutIEnumerables.verified.txt

@@ -41,7 +41,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       },
       Mode: Production
     }

src/Cli.Tests/Snapshots/EndToEndTests.TestInitForCosmosDBNoSql.verified.txt

@@ -46,7 +46,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       },
       Mode: Production
     }

src/Cli.Tests/Snapshots/EndToEndTests.TestUpdatingStoredProcedureWithRestMethods.verified.txt

@@ -41,7 +41,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/EndToEndTests.TestUpdatingStoredProcedureWithRestMethodsAndGraphQLOperations.verified.txt

@@ -41,7 +41,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },

src/Cli.Tests/Snapshots/InitTests.CosmosDbNoSqlDatabase.verified.txt

@@ -42,7 +42,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       },
       Mode: Production
     }

src/Cli.Tests/Snapshots/InitTests.CosmosDbPostgreSqlDatabase.verified.txt

@@ -42,7 +42,7 @@
         AllowCredentials: false
       },
       Authentication: {
-        Provider: AppService
+        Provider: Unauthenticated
       }
     }
   },