anchor.diff:  * user name is anonymous
   * `isSecure` is false as https is not used
   * `authScheme` is null
  +
  +=== Securing the endpoint
   
   So now let's actually secure something. Take a look at the new endpoint method `helloRolesAllowed` in the following:
   
  
positive.code: `@QuarkusTestResource` applies to all tests, not just `TokenSecuredResourceTest`.
  ====
  
  == References
  
  * https://tools.ietf.org/html/rfc6749[OAuth2]
  * link:security[Quarkus Security]
  
negative.code: ----
  
  
  === Finally, make a secured request to /secured/roles-allowed
  Now let's use this to make a secured request to the `/secured/roles-allowed` endpoint
  
  [source,shell]
  ----
  $ curl -H "Authorization: Bearer 60acf56d-9daf-49ba-b3be-7a423d9c7288" http://127.0.0.1:8080/secured/roles-allowed; echo
  