Move swagger out of development-only.

Shogi.Api/Models/User.cs

@@ -30,10 +30,6 @@ public class User
 
   public WhichLoginPlatform LoginPlatform { get; }
 
-  public bool IsGuest => LoginPlatform == WhichLoginPlatform.Guest;
-
-  public bool IsAdmin => LoginPlatform == WhichLoginPlatform.Microsoft && Id == "Hauth@live.com";
-
   public User(string id, string displayName, WhichLoginPlatform platform)
   {
     Id = id;

Shogi.Api/Program.cs

@@ -48,6 +48,9 @@ namespace Shogi.Api
             // Configure the HTTP request pipeline.
             if (app.Environment.IsDevelopment())
             {
+                app.UseHttpsRedirection(); // Apache handles HTTPS in production.
+            }
+
             app.UseSwagger();
             app.UseSwaggerUI(options =>
             {
@@ -55,8 +58,6 @@ namespace Shogi.Api
                 options.OAuthConfigObject.ClientId = builder.Configuration["AzureAd:SwaggerUIClientId"];
                 options.OAuthConfigObject.UsePkceWithAuthorizationCodeGrant = true;
             });
-                app.UseHttpsRedirection(); // Apache handles HTTPS in production.
-            }
 
             UseCorsAndWebSockets(app, allowedOrigins);
 
@@ -211,6 +212,7 @@ namespace Shogi.Api
                     BearerFormat = "JWT",
                     In = ParameterLocation.Header,
                 });
+
                 // This adds the lock symbol next to every route in SwaggerUI.
                 options.AddSecurityRequirement(new OpenApiSecurityRequirement
                 {

Shogi.Database/FirstTimeSetup.sql

@@ -0,0 +1,7 @@
+-- Create a user named Shogi.Api
+
+-- Create a role and grant execute permission to that role
+--CREATE ROLE db_executor
+--GRANT EXECUTE To db_executor
+
+-- Give Shogi.Api user permission to db_executor, db_datareader, db_datawriter

Shogi.Database/Shogi.Database.sqlproj

@@ -95,5 +95,6 @@
   <ItemGroup>
     <None Include="Post Deployment\Scripts\PopulatePieces.sql" />
     <None Include="Post Deployment\Scripts\EnableSnapshotIsolationLevel.sql" />
+    <None Include="FirstTimeSetup.sql" />
   </ItemGroup>
 </Project>