anchor.diff:  public%
   ----
   
  -Now, let's try to hit a protected resource anonymously.
  -
  +* Connect to a protected endpoint anonymously:
   [source,shell]
   ----
   $ curl -i -X GET http://localhost:8080/api/admin
  
positive.code: 
  admin%
  ----
  By providing the `admin:admin` credentials, the extension authenticated the user and loaded their roles.
  The `admin` user is authorized to access to the protected resources.
  
  The user `admin` should be forbidden to access a resource protected with `@RolesAllowed("user")` because it doesn't have this role.
  
  [source,shell]
  ----
  
negative.code: }
  ----
  
  WARNING: In a test environment, you can also store passwords in plain text by using `@Password(PasswordType.CLEAR)`.
  For applications running in production, do not store passwords in plain text.
  
  == What's next
  
  Congratulations!
  You have learned how to create and test a secure Quarkus application by combining the xref:security-built-in-authentication.adoc#basic-auth[Quarkus built-in basic HTTP authentication] with the JPA identity provider.
  
  After you have completed this tutorial, explore some of the more advanced security mechanisms in Quarkus. 
  Use the following information to learn how you can securely use `OpenID Connect` to provide secure single sign-on access to your Quarkus endpoints:
  
  * xref:security-openid-connect.adoc[Using OpenID Connect (OIDC) to Protect Service Applications using Bearer Token Authorization]
  * xref:security-openid-connect-web-authentication.adoc[Using OpenID Connect (OIDC) to Protect Web Applications using Authorization Code Flow
  ]
  
  == References
  
  * xref:security.adoc[Security Architecture and Guides]
  * xref:security-openid-connect.adoc[Using OpenID Connect (OIDC) to Protect Service Applications using Bearer Token Authorization]
  * xref:security-openid-connect-web-authentication.adoc[Using OpenID Connect (OIDC) to Protect Web Applications using Authorization Code Flow
  ]
  * xref:hibernate-orm-panache.adoc[Simplified Hibernate ORM with Panache]
  * xref:hibernate-orm.adoc[Using Hibernate ORM and JPA]