API can be enabled or disabled via the system configuration. When the API is disabled, the API-related security firewalls should not use some authorization authenticators, for example, OAuth authorization should be disabled.
To be able to configure authenticators for a disabled API feature, use the following configuration:
oro_api:
api_firewalls:
api_test_secured: # firewall name
feature_name: web_api
feature_firewall_authenticators: # list of authenticators that should be disabled when the feature specified in feature_name option is disabled
- Oro\Bundle\TestBundle\Security\Core\Authentication\SomeAuthenticator
test_secured:
feature_name: web_api
feature_firewall_authenticators:
- Oro\Bundle\TestBundle\Security\Core\Authentication\SomeAuthenticator
api_options:
feature_name: web_api