feat: Make db-anon-role optional

Without db-anon-role, PostgREST will block any anonymous access without hitting the database.

Resolves #1689, Ref #1823

test/io/configs/aliases.config

@@ -1,5 +1,3 @@
-db-anon-role = "required"
-
 db-schema = "provided_through_alias"
 max-rows = 1000
 pre-request = "check_alias"

test/io/configs/boolean-numeric.config

@@ -1,5 +1,3 @@
-db-anon-role = "required"
-
 db-channel-enabled = "1"
 db-prepared-statements = "0"
 jwt-secret-is-base64 = "2"

test/io/configs/boolean-string.config

@@ -1,5 +1,3 @@
-db-anon-role = "required"
-
 db-channel-enabled = "true"
 db-prepared-statements = "FALSE"
 jwt-secret-is-base64 = "\"true\""

test/io/configs/defaults.config

@@ -1,3 +1,2 @@
-db-anon-role = "required"
 # Not the default, but only works with PG* variables, which are not set
 db-config = false

test/io/configs/expected/aliases.config

@@ -1,4 +1,4 @@
-db-anon-role = "required"
+db-anon-role = ""
 db-channel = "pgrst"
 db-channel-enabled = true
 db-extra-search-path = "public"

test/io/configs/expected/boolean-numeric.config

@@ -1,4 +1,4 @@
-db-anon-role = "required"
+db-anon-role = ""
 db-channel = "pgrst"
 db-channel-enabled = true
 db-extra-search-path = "public"

test/io/configs/expected/boolean-string.config

@@ -1,4 +1,4 @@
-db-anon-role = "required"
+db-anon-role = ""
 db-channel = "pgrst"
 db-channel-enabled = true
 db-extra-search-path = "public"

test/io/configs/expected/defaults.config

@@ -1,4 +1,4 @@
-db-anon-role = "required"
+db-anon-role = ""
 db-channel = "pgrst"
 db-channel-enabled = true
 db-extra-search-path = "public"

test/io/configs/expected/no-defaults-with-db-other-authenticator.config

@@ -1,4 +1,4 @@
-db-anon-role = "postgrest_test_anonymous"
+db-anon-role = "other"
 db-channel = "postgrest"
 db-channel-enabled = false
 db-extra-search-path = "public,extensions,other"

test/io/configs/expected/no-defaults-with-db.config

@@ -1,4 +1,4 @@
-db-anon-role = "postgrest_test_anonymous"
+db-anon-role = "anonymous"
 db-channel = "postgrest"
 db-channel-enabled = false
 db-extra-search-path = "public,extensions,private"

test/io/configs/expected/types.config

@@ -1,4 +1,4 @@
-db-anon-role = "required"
+db-anon-role = ""
 db-channel = "pgrst"
 db-channel-enabled = true
 db-extra-search-path = "public"

test/io/configs/types.config

@@ -1,5 +1,4 @@
 # tests how config options fall back with invalid types
-db-anon-role = "required"
 
 # expects string
 app.settings.test = false