file-transformer-rda-json/web/src/main/resources/config/security.yml

web:
  security:
    enabled: true
    authorized-endpoints: [ api ]
    allowed-endpoints: [ health ]
    idp:
      api-key:
        enabled: false
      resource:
        token-type: JWT #| opaque
        jwt:
          issuer-uri: ${IDP_ISSUER_URI}
          validIssuer: ${IDP_ISSUER_URI}