Should be able to declare more than one controllerObjectName per requestPatterns
For example If you want to enable DefaultProvider in every controller but the ApiController and TokenEndpoint
- controllerObjectName: '(?!My\Package\ApiController)' - controllerObjectName: '.*' - controllerObjectName: '(?!My\Package\TokenEndpoint)'
ApiController it's authenticated with other provider, for example an OAuth2AccessTokenProvider
the OAuth2 TokenEndpoind have to be authenticated following the OAuth2 draft and not the common way defined for the rest of your app