core/modules/rest/src/Routing/ResourceRoutes.php                   | 7 -------
 .../tests/src/Functional/EntityResource/EntityResourceTestBase.php | 2 +-
 2 files changed, 1 insertion(+), 8 deletions(-)

diff --git a/core/modules/rest/src/Routing/ResourceRoutes.php b/core/modules/rest/src/Routing/ResourceRoutes.php
index 8aedfba..0f4dca5 100644
--- a/core/modules/rest/src/Routing/ResourceRoutes.php
+++ b/core/modules/rest/src/Routing/ResourceRoutes.php
@@ -93,12 +93,6 @@ protected function getRoutesForResourceConfig(RestResourceConfigInterface $rest_
       if ($methods && ($method = $methods[0]) && $supported_formats = $rest_resource_config->getFormats($method)) {
         $route->setRequirement('_csrf_request_header_token', 'TRUE');
 
-        // Check that authentication providers are defined.
-        if (empty($rest_resource_config->getAuthenticationProviders($method))) {
-          $this->logger->error('At least one authentication provider must be defined for resource @id', array(':id' => $rest_resource_config->id()));
-          continue;
-        }
-
         // Check that formats are defined.
         if (empty($rest_resource_config->getFormats($method))) {
           $this->logger->error('At least one format must be defined for resource @id', array(':id' => $rest_resource_config->id()));
@@ -114,7 +108,6 @@ protected function getRoutesForResourceConfig(RestResourceConfigInterface $rest_
 
         // The configuration seems legit at this point, so we set the
         // authentication provider and add the route.
-        $route->setOption('_auth', $rest_resource_config->getAuthenticationProviders($method));
         $route->setDefault('_rest_resource_config', $rest_resource_config->id());
         $collection->add("rest.$name", $route);
       }
diff --git a/core/modules/rest/tests/src/Functional/EntityResource/EntityResourceTestBase.php b/core/modules/rest/tests/src/Functional/EntityResource/EntityResourceTestBase.php
index 973f5b9..7d3a501 100644
--- a/core/modules/rest/tests/src/Functional/EntityResource/EntityResourceTestBase.php
+++ b/core/modules/rest/tests/src/Functional/EntityResource/EntityResourceTestBase.php
@@ -143,7 +143,7 @@
   protected function provisionEntityResource() {
     // It's possible to not have any authentication providers enabled, when
     // testing public (anonymous) usage of a REST resource.
-    $auth = isset(static::$auth) ? [static::$auth] : [];
+    $auth = static::$auth !== FALSE ? [static::$auth] : [];
     $this->provisionResource('entity.' . static::$entityTypeId, [static::$format], $auth);
   }