Revert "Revert "Cleans up BackofficeSecurity, fixes up AuthenticationController for endpoints that aren't authorized (and simplifies)""

Signed-off-by: Bjarke Berg <mail@bergmania.dk>

src/Umbraco.Web.Common/ApplicationModels/AuthenticateAsBackOfficeSchemeConvention.cs

@@ -1,16 +0,0 @@
-using Microsoft.AspNetCore.Mvc.ApplicationModels;
-using Umbraco.Web.Common.Filters;
-
-namespace Umbraco.Web.Common.ApplicationModels
-{
-    /// <summary>
-    /// Ensures all requests with this convention are authenticated with the back office scheme
-    /// </summary>
-    public class AuthenticateAsBackOfficeSchemeConvention : IActionModelConvention
-    {
-        public void Apply(ActionModel action)
-        {
-            action.Filters.Add(new EnsureUmbracoBackOfficeAuthentication());
-        }
-    }
-}

src/Umbraco.Web.Common/ApplicationModels/BackOfficeApplicationModelProvider.cs

@@ -17,8 +17,7 @@ namespace Umbraco.Web.Common.ApplicationModels
         {
             ActionModelConventions = new List<IActionModelConvention>()
             {
-                new BackOfficeIdentityCultureConvention(),
-                new AuthenticateAsBackOfficeSchemeConvention()
+                new BackOfficeIdentityCultureConvention()
             };
         }