Merge pull request #23386 from backstage/rugvip/no-auth

app-backend: disable default auth policy for now

.changeset/shiny-bulldogs-run.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-app-backend': patch
+---
+
+Disable default auth policy, allowing unauthenticated access to app bundle.

plugins/app-backend/src/service/appPlugin.ts

@@ -81,6 +81,10 @@ export const appPlugin = createBackendPlugin({
           schema,
         });
         httpRouter.use(router);
+        httpRouter.addAuthPolicy({
+          allow: 'unauthenticated',
+          path: '/',
+        });
       },
     });
   },