Move swagger out of development-only.

Shogi.Api/Models/User.cs

@@ -30,10 +30,6 @@ public class User
 
   public WhichLoginPlatform LoginPlatform { get; }
 
-  public bool IsGuest => LoginPlatform == WhichLoginPlatform.Guest;
-
-  public bool IsAdmin => LoginPlatform == WhichLoginPlatform.Microsoft && Id == "Hauth@live.com";
-
   public User(string id, string displayName, WhichLoginPlatform platform)
   {
     Id = id;

Shogi.Api/Program.cs

@@ -48,16 +48,17 @@ namespace Shogi.Api
             // Configure the HTTP request pipeline.
             if (app.Environment.IsDevelopment())
             {
-                app.UseSwagger();
-                app.UseSwaggerUI(options =>
-                {
-                    options.OAuthScopes("api://c1e94676-cab0-42ba-8b6c-9532b8486fff/DefaultScope");
-                    options.OAuthConfigObject.ClientId = builder.Configuration["AzureAd:SwaggerUIClientId"];
-                    options.OAuthConfigObject.UsePkceWithAuthorizationCodeGrant = true;
-                });
                 app.UseHttpsRedirection(); // Apache handles HTTPS in production.
             }
 
+            app.UseSwagger();
+            app.UseSwaggerUI(options =>
+            {
+                options.OAuthScopes("api://c1e94676-cab0-42ba-8b6c-9532b8486fff/DefaultScope");
+                options.OAuthConfigObject.ClientId = builder.Configuration["AzureAd:SwaggerUIClientId"];
+                options.OAuthConfigObject.UsePkceWithAuthorizationCodeGrant = true;
+            });
+
             UseCorsAndWebSockets(app, allowedOrigins);
 
             app.UseAuthentication();
@@ -211,6 +212,7 @@ namespace Shogi.Api
                     BearerFormat = "JWT",
                     In = ParameterLocation.Header,
                 });
+
                 // This adds the lock symbol next to every route in SwaggerUI.
                 options.AddSecurityRequirement(new OpenApiSecurityRequirement
                 {