Authentication

ASAP (Service-to-service authentication)

Requests to the Admin Portfolio API must have a valid ASAP token to identify the source with audience set to "admin-portfolio". Services should request to be whitelisted by admin-portfolio in #access-engineering.