Resolved with:
- enable Post as token auth method
- set oidc as 0 order for authc
- add authz
authz:
test:
description: "Authorize"
http_enabled: true
transport_enabled: true
authorization_backend:
type: noop