anchor.diff:  Master config:
   ----
   oauthConfig:
  +  ...
     sessionConfig:
       sessionMaxAgeSeconds: 300 <1>
       sessionName: ssn <2>
       sessionSecrets: <3>
  -    - authentication: &hellip; <4>
  -      encryption: &hellip; <5>
  +    - authentication: ... <4>
  +      encryption: ... <5>
   ----
   <1> Controls the maximum age of a session (sessions auto-expire once a token request is complete). If auto-grant is not enabled, sessions must last as long as the user is expected to take to approve or reject a client authorization request.
   <2> Name of the cookie used to store the session.
  
positive.code: Master config:
  ----
  oauthConfig:
    identityProviders:
    - name: my_allow_provider <1>
      challenge: true <2>
  
negative.code: Master config:
  ----
  oauthConfig:
    ...
    tokenConfig:
      accessTokenMaxAgeSeconds: 3600
      authorizeTokenMaxAgeSeconds: 300
  