file-transformer-rda-json/web/src/main/resources/config/security.yml

web:
  security:
    enabled: true
    authorized-endpoints: [ api ]
    allowed-endpoints: [ health ]
    idp:
      api-key:
        enabled: false
      resource:
        token-type: JWT #| opaque
        jwt:
          claims: [ role, x-role ]
          issuer-uri: ${IDP_ISSUER_URI:}
          audiences: [ "dmp_zenodo_bridge" ]
          validIssuer: ${IDP_ISSUER_URI:}