Paste a Keycloak access token (or local HS256 JWT for profile local). The portal calls the BFF with Bearer auth.
local