in src/app/ContosoTraders.Api.Core/DependencyInjection.cs [135:149]
private static void ConfigureAspNetCoreMiddleware(WebApplication app)
{
app.UseSwagger();
app.UseSwaggerUI();
app.UseHttpsRedirection();
app.UseCors(_allowSpecificOrigins);
#if TODO_INVESTIGATE_LATER
app.UseAuthorization(); // very important, else [Authorize] will not work in controllers.
app.UseAuthentication();
#endif
app.MapControllers();
}