RequireAuthorization

A call on an endpoint or route group that requires a signed-in caller, or a named policy such as `"staff"`. `.AllowAnonymous()` opens one endpoint again.