web:
  security:
    allowed-endpoints: [ api/public, api/dmp/public, api/description/public, /api/supportive-material/public, api/language/public, api/contact-support/public, api/dashboard/public, api/prometheus, api/health, api/metrics ]
    idp:
      resource:
        jwt:
          claims: [ role, x-role ]
          audiences: [ "dmp_web" ]