feat: system api requires authenticated requests (#3570)

* begin auth

* feat: system api requires authenticated requests

* fix tests

internal/api/api.go

@@ -14,7 +14,6 @@ import (
 	internal_authz "github.com/zitadel/zitadel/internal/api/authz"
 	"github.com/zitadel/zitadel/internal/api/grpc/server"
 	http_util "github.com/zitadel/zitadel/internal/api/http"
-	"github.com/zitadel/zitadel/internal/authz/repository"
 	"github.com/zitadel/zitadel/internal/errors"
 	"github.com/zitadel/zitadel/internal/query"
 	"github.com/zitadel/zitadel/internal/telemetry/tracing"
@@ -37,23 +36,20 @@ type health interface {
 func New(
 	port uint16,
 	router *mux.Router,
-	repo *struct {
-		repository.Repository
-		*query.Queries
-	},
+	queries *query.Queries,
+	verifier *internal_authz.TokenVerifier,
 	authZ internal_authz.Config,
 	externalSecure bool,
 	http2HostName string,
 ) *API {
-	verifier := internal_authz.Start(repo)
 	api := &API{
 		port:           port,
 		verifier:       verifier,
-		health:         repo,
+		health:         queries,
 		router:         router,
 		externalSecure: externalSecure,
 	}
-	api.grpcServer = server.CreateServer(api.verifier, authZ, repo.Queries, http2HostName)
+	api.grpcServer = server.CreateServer(api.verifier, authZ, queries, http2HostName)
 	api.routeGRPC()
 
 	api.RegisterHandler("/debug", api.healthHandler())
@@ -68,9 +64,7 @@ func (a *API) RegisterServer(ctx context.Context, grpcServer server.Server) erro
 		return err
 	}
 	a.RegisterHandler(prefix, handler)
-	if a.verifier != nil {
-		a.verifier.RegisterServer(grpcServer.AppName(), grpcServer.MethodPrefix(), grpcServer.AuthMethods())
-	}
+	a.verifier.RegisterServer(grpcServer.AppName(), grpcServer.MethodPrefix(), grpcServer.AuthMethods())
 	return nil
 }