FSPT-342 - Disable JWT auth for Dev and Test envs as well as UAT

We are planning to shut down the UAT environment to save on costs. FAB in Production currently uses Form Runner in UAT for previewing forms. We are now switching Prod FAB to use Test Runner instead of UAT Runner, so that Prod FAB is unaffected when UAT is shut down. However, in order to do this we need to make sure that the /publish endpoint is unprotected by JWT auth in Test, as it has been in UAT, because otherwise we cannot preview from Prod FAB. This is because Prod FAB uses Prod Authenticator which authenticates only within the Prod env, not across envs.

This is intended as a temporary measure to unblock UAT environment shutdown. Longer-term we plan to link Prod FAB to Prod Runner. This will allow this environment-conditional disabling of JWT auth to be rightfully abandoned, but requires some thought around ensuring that preview forms don't contaminate the production repository.

Author: wjrm500

runner/src/server/plugins/engine/api/RegisterFormPublishApi.ts

@@ -244,9 +244,9 @@ export class RegisterFormPublishApi implements RegisterApi {
             }
         }
 
-        // TODO: Stop being naughty! Conditionally disabling auth for UAT env is a temporary measure for getting FAB
-        // into production
-        if (config.jwtAuthEnabled && config.jwtAuthEnabled === "true" && config.copilotEnv !== "uat") {
+        // TODO: Stop being naughty! Conditionally disabling auth for pre-prod envs is a temporary measure for getting
+        // FAB into production
+        if (config.jwtAuthEnabled && config.jwtAuthEnabled === "true" && config.copilotEnv === "prod") {
             getOptions.options.auth = jwtAuthStrategyName
         }
 
@@ -311,7 +311,7 @@ export class RegisterFormPublishApi implements RegisterApi {
                 handler: postHandler,
             }
         }
-        if (config.jwtAuthEnabled && config.jwtAuthEnabled === "true" && config.copilotEnv !== "uat") {
+        if (config.jwtAuthEnabled && config.jwtAuthEnabled === "true" && config.copilotEnv === "prod") {
             postConfig.options.auth = jwtAuthStrategyName
         }
         server.route(postConfig);