diff --git a/ibexa/commerce/5.0/config/packages/lexik_jwt_authentication.yaml b/ibexa/commerce/5.0/config/packages/lexik_jwt_authentication.yaml
index e1e64743..42ddd3ce 100644
--- a/ibexa/commerce/5.0/config/packages/lexik_jwt_authentication.yaml
+++ b/ibexa/commerce/5.0/config/packages/lexik_jwt_authentication.yaml
@@ -5,7 +5,7 @@ lexik_jwt_authentication:
     # Disabled by default, because Page builder use an custom extractor
     token_extractors:
         authorization_header:
-            enabled: true
+            enabled: false
         cookie:
             enabled: false
         query_parameter:
diff --git a/ibexa/commerce/5.0/config/packages/security.yaml b/ibexa/commerce/5.0/config/packages/security.yaml
index 801ab163..fd1b7047 100644
--- a/ibexa/commerce/5.0/config/packages/security.yaml
+++ b/ibexa/commerce/5.0/config/packages/security.yaml
@@ -88,24 +88,24 @@ security:
         #    stateless: true
 
         # Uncomment the rules below to enable JSON Web Token (JWT) authentication for REST and/or GraphQL
-        ibexa_jwt_rest:
-            request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
-            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            stateless: true
-            provider: ibexa
-            json_login:
-                check_path: ibexa.rest.create_token
-                username_path: JWTInput.username
-                password_path: JWTInput.password
-                success_handler: lexik_jwt_authentication.handler.authentication_success
-                failure_handler: lexik_jwt_authentication.handler.authentication_failure
-
-        ibexa_jwt_rest.api:
-            request_matcher: Ibexa\Rest\Security\AuthorizationHeaderRESTRequestMatcher
-            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            provider: ibexa
-            stateless: true
-            jwt: ~
+        #ibexa_jwt_rest:
+        #    request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    stateless: true
+        #    provider: ibexa
+        #    json_login:
+        #        check_path: ibexa.rest.create_token
+        #        username_path: JWTInput.username
+        #        password_path: JWTInput.password
+        #        success_handler: lexik_jwt_authentication.handler.authentication_success
+        #        failure_handler: lexik_jwt_authentication.handler.authentication_failure
+
+        #ibexa_jwt_rest.api:
+        #    request_matcher: Ibexa\Rest\Security\AuthorizationHeaderRESTRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    provider: ibexa
+        #    stateless: true
+        #    jwt: ~
 
         #ibexa_jwt_graphql:
         #    request_matcher: Ibexa\GraphQL\Security\NonAdminGraphQLRequestMatcher
diff --git a/ibexa/experience/5.0/config/packages/lexik_jwt_authentication.yaml b/ibexa/experience/5.0/config/packages/lexik_jwt_authentication.yaml
index e1e64743..42ddd3ce 100644
--- a/ibexa/experience/5.0/config/packages/lexik_jwt_authentication.yaml
+++ b/ibexa/experience/5.0/config/packages/lexik_jwt_authentication.yaml
@@ -5,7 +5,7 @@ lexik_jwt_authentication:
     # Disabled by default, because Page builder use an custom extractor
     token_extractors:
         authorization_header:
-            enabled: true
+            enabled: false
         cookie:
             enabled: false
         query_parameter:
diff --git a/ibexa/experience/5.0/config/packages/security.yaml b/ibexa/experience/5.0/config/packages/security.yaml
index c2613109..aae4504b 100644
--- a/ibexa/experience/5.0/config/packages/security.yaml
+++ b/ibexa/experience/5.0/config/packages/security.yaml
@@ -76,24 +76,24 @@ security:
         #    stateless: true
 
         # Uncomment the rules below to enable JSON Web Token (JWT) authentication for REST and/or GraphQL
-        ibexa_jwt_rest:
-            request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
-            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            stateless: true
-            provider: ibexa
-            json_login:
-                check_path: ibexa.rest.create_token
-                username_path: JWTInput.username
-                password_path: JWTInput.password
-                success_handler: lexik_jwt_authentication.handler.authentication_success
-                failure_handler: lexik_jwt_authentication.handler.authentication_failure
-
-        ibexa_jwt_rest.api:
-            request_matcher: Ibexa\Rest\Security\AuthorizationHeaderRESTRequestMatcher
-            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            provider: ibexa
-            stateless: true
-            jwt: ~
+        #ibexa_jwt_rest:
+        #    request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    stateless: true
+        #    provider: ibexa
+        #    json_login:
+        #        check_path: ibexa.rest.create_token
+        #        username_path: JWTInput.username
+        #        password_path: JWTInput.password
+        #        success_handler: lexik_jwt_authentication.handler.authentication_success
+        #        failure_handler: lexik_jwt_authentication.handler.authentication_failure
+
+        #ibexa_jwt_rest.api:
+        #    request_matcher: Ibexa\Rest\Security\AuthorizationHeaderRESTRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    provider: ibexa
+        #    stateless: true
+        #    jwt: ~
 
         #ibexa_jwt_graphql:
         #    request_matcher: Ibexa\GraphQL\Security\NonAdminGraphQLRequestMatcher
diff --git a/ibexa/headless/5.0/config/packages/lexik_jwt_authentication.yaml b/ibexa/headless/5.0/config/packages/lexik_jwt_authentication.yaml
index e1e64743..42ddd3ce 100644
--- a/ibexa/headless/5.0/config/packages/lexik_jwt_authentication.yaml
+++ b/ibexa/headless/5.0/config/packages/lexik_jwt_authentication.yaml
@@ -5,7 +5,7 @@ lexik_jwt_authentication:
     # Disabled by default, because Page builder use an custom extractor
     token_extractors:
         authorization_header:
-            enabled: true
+            enabled: false
         cookie:
             enabled: false
         query_parameter:
diff --git a/ibexa/headless/5.0/config/packages/security.yaml b/ibexa/headless/5.0/config/packages/security.yaml
index c2613109..aae4504b 100644
--- a/ibexa/headless/5.0/config/packages/security.yaml
+++ b/ibexa/headless/5.0/config/packages/security.yaml
@@ -76,24 +76,24 @@ security:
         #    stateless: true
 
         # Uncomment the rules below to enable JSON Web Token (JWT) authentication for REST and/or GraphQL
-        ibexa_jwt_rest:
-            request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
-            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            stateless: true
-            provider: ibexa
-            json_login:
-                check_path: ibexa.rest.create_token
-                username_path: JWTInput.username
-                password_path: JWTInput.password
-                success_handler: lexik_jwt_authentication.handler.authentication_success
-                failure_handler: lexik_jwt_authentication.handler.authentication_failure
-
-        ibexa_jwt_rest.api:
-            request_matcher: Ibexa\Rest\Security\AuthorizationHeaderRESTRequestMatcher
-            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            provider: ibexa
-            stateless: true
-            jwt: ~
+        #ibexa_jwt_rest:
+        #    request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    stateless: true
+        #    provider: ibexa
+        #    json_login:
+        #        check_path: ibexa.rest.create_token
+        #        username_path: JWTInput.username
+        #        password_path: JWTInput.password
+        #        success_handler: lexik_jwt_authentication.handler.authentication_success
+        #        failure_handler: lexik_jwt_authentication.handler.authentication_failure
+
+        #ibexa_jwt_rest.api:
+        #    request_matcher: Ibexa\Rest\Security\AuthorizationHeaderRESTRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    provider: ibexa
+        #    stateless: true
+        #    jwt: ~
 
         #ibexa_jwt_graphql:
         #    request_matcher: Ibexa\GraphQL\Security\NonAdminGraphQLRequestMatcher
diff --git a/ibexa/oss/5.0/config/packages/lexik_jwt_authentication.yaml b/ibexa/oss/5.0/config/packages/lexik_jwt_authentication.yaml
index e1e64743..42ddd3ce 100644
--- a/ibexa/oss/5.0/config/packages/lexik_jwt_authentication.yaml
+++ b/ibexa/oss/5.0/config/packages/lexik_jwt_authentication.yaml
@@ -5,7 +5,7 @@ lexik_jwt_authentication:
     # Disabled by default, because Page builder use an custom extractor
     token_extractors:
         authorization_header:
-            enabled: true
+            enabled: false
         cookie:
             enabled: false
         query_parameter:
diff --git a/ibexa/oss/5.0/config/packages/security.yaml b/ibexa/oss/5.0/config/packages/security.yaml
index 6f87c796..0c788dbe 100644
--- a/ibexa/oss/5.0/config/packages/security.yaml
+++ b/ibexa/oss/5.0/config/packages/security.yaml
@@ -54,24 +54,24 @@ security:
             security: false
 
         # Uncomment the rules below to enable JSON Web Token (JWT) authentication for REST and/or GraphQL
-        ibexa_jwt_rest:
-            request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
-            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            stateless: true
-            provider: ibexa
-            json_login:
-                check_path: ibexa.rest.create_token
-                username_path: JWTInput.username
-                password_path: JWTInput.password
-                success_handler: lexik_jwt_authentication.handler.authentication_success
-                failure_handler: lexik_jwt_authentication.handler.authentication_failure
+        #ibexa_jwt_rest:
+        #    request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    stateless: true
+        #    provider: ibexa
+        #    json_login:
+        #        check_path: ibexa.rest.create_token
+        #        username_path: JWTInput.username
+        #        password_path: JWTInput.password
+        #        success_handler: lexik_jwt_authentication.handler.authentication_success
+        #        failure_handler: lexik_jwt_authentication.handler.authentication_failure
 
-        ibexa_jwt_rest.api:
-            request_matcher: Ibexa\Rest\Security\AuthorizationHeaderRESTRequestMatcher
-            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            provider: ibexa
-            stateless: true
-            jwt: ~
+        #ibexa_jwt_rest.api:
+        #    request_matcher: Ibexa\Rest\Security\AuthorizationHeaderRESTRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    provider: ibexa
+        #    stateless: true
+        #    jwt: ~
 
         #ibexa_jwt_graphql:
         #    request_matcher: Ibexa\GraphQL\Security\NonAdminGraphQLRequestMatcher