Conversion of type '{ domainWhiteList: never[]; protocolWhiteList: never[]; defaultMiddleware: string; csrf: { enable: true; type: "ctoken"; ignoreJSON: false; useSession: false; cookieDomain: undefined; cookieName: string; ... 7 more ...; cookieOptions: { ...; }; }; ... 9 more ...; ssrf: { ...; }; }' to type 'SecurityConfig' may be a mistake because neither type sufficiently overlaps with the other. If this was intentional, convert the expression to 'unknown' first.