Configure Feature Depended Firewall Authenticators 

API can be enabled or disabled via the system configuration. When the API is disabled, the API-related security firewalls should not use some authorization authenticators, for example, OAuth authorization should be disabled.

To be able to configure authenticators for a disabled API feature, use the following configuration:

oro_api:
    api_firewalls:
        api_test_secured: # firewall name
            feature_name: web_api
            feature_firewall_authenticators: # list of authenticators that should be disabled when the feature specified in feature_name option is disabled
                - Oro\Bundle\TestBundle\Security\Core\Authentication\SomeAuthenticator
        test_secured:
            feature_name: web_api
            feature_firewall_authenticators:
                - Oro\Bundle\TestBundle\Security\Core\Authentication\SomeAuthenticator
        api_options:
            feature_name: web_api