anchor.diff:  Master config:
   ----
   oauthConfig:
  +  ...
     identityProviders:
     - name: my_deny_provider <1>
       challenge: true <2>
  
positive.code: Master config:
  ----
  oauthConfig:
    sessionConfig:
      sessionMaxAgeSeconds: 300 <1>
      sessionName: ssn <2>
      sessionSecrets: <3>
      - authentication: &hellip; <4>
        encryption: &hellip; <5>
  ----
  <1> Controls the maximum age of a session (sessions auto-expire once a token request is complete). If auto-grant is not enabled, sessions must last as long as the user is expected to take to approve or reject a client authorization request.
  <2> Name of the cookie used to store the session.
  
negative.code: Master config:
  ----
  oauthConfig:
    ...
    identityProviders:
    - name: my_remote_basic_auth_provider <1>
      challenge: true <2>
  