api: pattern: ^/api security: true stateless: true oauth2: true <--- Do not work! `Not configuring explicitly the provider for the "oauth2" listener on "api" firewall is ambiguous as there is more than one registered provider.`