'ZF\\OAuth2' doesn't trigger when url /api/rest/status is opened in browser

[weierophinney]

Accordingly to this https://github.com/zfcampus/apigility-documentation/blob/master/auth/user-differentiation.md documentation when I set config:

'zf-mvc-auth' => [
        'authentication' => [
            'map' => [
                'DbApi\\V1'  => 'oauth2',
                'ZF\\OAuth2' => 'session',
            ],

neither 'ZF\OAuth2' nor SeesionAdapter doesn't trigger if I open rest (/api/rest/status) or rpc urls in browser. It seems, that bshaffer's OAuth2 methods triggered directly in this case. 'ZF\OAuth2' controller and SessionAdapter is triggered only when I open url /oauth in the browser.
Also, I have set 'deny_by_default' to 'true'.

Do I misunderstood something?

---

Originally posted by @tempfirstuser at zfcampus/apigility-documentation#88