Moved .RequireAuthentication() to endpoints, removed it from EndpointGroup

PostFundManagement.Api/Program.cs

@@ -95,7 +95,7 @@ var allowedOrigins = builder.Configuration.GetSection("CorsOrigins").Get<string[
 
 builder.Services.AddCors(options =>
 {
-    options.AddPolicy("AllowConfiguredOrigins", policy =>
+    options.AddPolicy(CorsPolicy, policy =>
     {
         policy.WithOrigins(allowedOrigins)
               .AllowAnyHeader()
@@ -115,7 +115,7 @@ if (!scheduler!.IsStarted)
 app.UseHsts();
 app.UseHttpsRedirection();
 app.UseRouting();
-app.UseCors("AllowConfiguredOrigins");
+app.UseCors(CorsPolicy);
 app.UseOutputCache();
 
 app.UseAuthentication();
@@ -130,7 +130,7 @@ var versionGroups = new Dictionary<int, RouteGroupBuilder>
 {
     {
         1, app.MapGroup("v{version:apiVersion}").WithApiVersionSet(versionSet)
-            .RequireAuthorization("ApiScope").AddEndpointFilter<ActiveUserFilter>()
+            .AddEndpointFilter<ActiveUserFilter>()
     }
 };