apollo-portal/src/main/java/com/ctrip/framework/apollo/portal/spi/configuration/AuthConfiguration.java/OidcWebSecurityConfigurerAdapter/configure
class OidcWebSecurityConfigurerAdapter:    @Override
    protected void configure(HttpSecurity http) throws Exception {
      http.csrf().disable();
      http.authorizeRequests(requests -> requests.antMatchers(BY_PASS_URLS).permitAll());
      http.authorizeRequests(requests -> requests.anyRequest().authenticated());
      http.oauth2Login(configure ->
          configure.clientRegistrationRepository(
              new ExcludeClientCredentialsClientRegistrationRepository(
                  this.clientRegistrationRepository)));
      http.oauth2Client();
      http.logout(configure -> {
        OidcClientInitiatedLogoutSuccessHandler logoutSuccessHandler = new OidcClientInitiatedLogoutSuccessHandler(
            this.clientRegistrationRepository);
        logoutSuccessHandler.setPostLogoutRedirectUri("{baseUrl}");
        configure.logoutSuccessHandler(logoutSuccessHandler);
      });
      // make jwt optional
      String jwtIssuerUri = this.oauth2ResourceServerProperties.getJwt().getIssuerUri();
      if (!StringUtils.isBlank(jwtIssuerUri)) {
        http.oauth2ResourceServer().jwt();
      }
    }