Only relevant to Blazor Web Assembly:
Authorization not enfored at odata Controller of Server component
As I can see, the Authorization is applied to the client razor pages, but not at the Server-side odata Controller.
E.G.
https://localhost:5001/odata/dbcontext/test?$top=10&$skip=0&$expand=DsMain%2CScUsr&$count=true
returns valid data to any client since there is no authorization implemented.
Did I overlook something?
Thank you
