allow api requests with bearer tokens

authn-env/oauth2-proxy-keycloak.cfg

@@ -5,6 +5,7 @@ cookie_secure="false"
 upstreams="http://dataverse"
 cookie_domains=["oauth2-proxy.localtest.me:4080", "dataverse.localtest.me:8000", "keycloak.localtest.me:9080"] # Required so cookie can be read on all subdomains.
 whitelist_domains=[".localtest.me"] # Required to allow redirection back to original requested target.
+skip_jwt_bearer_tokens="true" # will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers)
 
 # keycloak provider
 client_secret="72341b6d-7065-4518-a0e4-50ee15025608"