[API tests] Default to web service key authentication

build/scripts/NewBcContainer.ps1

@@ -24,17 +24,10 @@ if ($platformVersion) {
 
 New-BcContainer @parameters
 
-if ($parameters.auth -in @('UserPassword', 'NavUserPassword')) {
-    if (-not $parameters.credential) {
-        throw "The BCApps UserPassword test container requires a credential."
-    }
-
-    Import-Module (Join-Path $PSScriptRoot 'ApiTestCredential.psm1') -Force
-    Write-ApiTestPassword -ContainerName $parameters.ContainerName -Credential $parameters.credential
-}
-
 Set-BcContainerServerConfiguration -containerName $parameters.ContainerName -keyName "EnforceUserPathForAlFileOperations" -keyValue "false"
 Set-BcContainerServerConfiguration -containerName $parameters.ContainerName -keyName "UsePermissionSetsFromExtensions" -keyValue "true"
+# API tests call the container's own web services through AL HttpClient, which anti-SSRF blocks for local addresses (same as NAV RunALTests.ps1).
+Set-BcContainerServerConfiguration -containerName $parameters.ContainerName -keyName "NavHttpClientAntiSSRFEnabled" -keyValue "false"
 Restart-BcContainer -containerName $parameters.ContainerName
 
 $installedApps = Get-BcContainerAppInfo -containerName $parameters.ContainerName -tenantSpecificProperties -sort DependenciesLast