How to integrate authentication/authorization middleware
pp.UseAuthentication(); // Validates user identity
pp.UseAuthorization(); // Applies policies/roles
Order matters: must be after routing but before endpoints.
pp.UseRouting();
pp.UseAuthentication();
pp.UseAuthorization();
pp.UseEndpoints(...);