diff --git a/servo/build.gradle.kts b/servo/build.gradle.kts
index a22e49f..8f21f5c 100644
--- a/servo/build.gradle.kts
+++ b/servo/build.gradle.kts
@@ -14,7 +14,7 @@ dependencies {
     api("org.clever:clever-data-jdbc-meta")
     api("org.clever:clever-data-redis")
     api("org.clever:clever-web")
-    // api("org.clever:clever-security")
+     api("org.clever:clever-security")
     // api("org.clever:clever-task")
     // api("org.clever:clever-task-ext")
     api("org.clever:clever-js-graaljs")
diff --git a/servo/src/main/resources/application-dev.yml b/servo/src/main/resources/application-dev.yml
index df90526..1197f6f 100644
--- a/servo/src/main/resources/application-dev.yml
+++ b/servo/src/main/resources/application-dev.yml
@@ -65,3 +65,10 @@ web:
       locations:
         - './yvan-lcc-bench/servo/out/production/classes'
         #- './yvan-lcc-bench/servo/build/classes/java/main'
+  security:
+    enable: true
+    data-source:
+      jdbc-name: "default"
+      enable-redis: true
+      redis-name: "default"
+      redis-namespace: "yvan-lcc-bench"
diff --git a/servo/src/main/resources/application.yml b/servo/src/main/resources/application.yml
index 9da3e2d..e4f90e9 100644
--- a/servo/src/main/resources/application.yml
+++ b/servo/src/main/resources/application.yml
@@ -139,3 +139,39 @@ web:
       isolation: default
       timeout: -1
       read-only: false
+  security:
+    ignore-paths:
+      - '/favicon.ico'
+      - '/dist/**'
+      - '/static/**'
+      - '/**/*.png'
+      - '/**/*.ico'
+      - '/**/*.js'
+      - '/**/*.css'
+      - '/**/*.html'
+      - '/**/*.ts'
+      - '/**/*.tsx'
+      - '/**/*.map'
+      - '/**/*.png'
+      - '/**/*.jpg'
+      - '/**/*.gif'
+      - '/**/*.ttf'
+      - '/**/*.woff'
+      - '/**/*.woff2'
+      - '/**/.git'
+    ignore-auth-paths: [ ]
+    ignore-auth-failed-paths: [ ]
+    current-user-path: '/current_user'
+    login:
+      paths: [ '/login' ]
+      post-only: true
+      allow-repeat-login: true
+      concurrent-login-count: 1
+      allow-after-login: true
+    logout:
+      path: '/logout'
+    token:
+      secret-key: 'yvan-lcc-bench'
+      token-validity: 30d
+      jwt-token-name: 'authorization'
+      refresh-token-name: 'refresh-token'