web:
security:
allowed-endpoints: [ api/public, api/dmp/public, api/description/public, /api/supportive-material/public, api/language/public, api/contact-support/public, api/dashboard/public, api/prometheus, api/health, api/metrics ]
idp:
resource:
jwt:
claims: [ role, x-role ]
audiences: [ "dmp_web" ]