Static Web App with Managed Function - can't turn off Easy Auth headers

Question

I have created a Static Web App with Managed Functions, and I am using custom Auth by sending a token in the Authorization header.

I have turned Easy Auth off in the managed functions by setting this in the staticwebapp.config.json

  "routes": [
    {
      "route": "/api/*",
      "allowedRoles": ["anonymous"]
    }
  ],

In spite of that, Easy Auth seems to still be on because I get a 401 when hitting the endpoints, and I see that the token issuer and audience is a different one (from the logs in Application Insights):

Decoded token issuer: https://random-uuid.scm.azurewebsites.net

Decoded token audience: https://random-uuid.azurewebsites.net/azurefunctions

I can't find a place in the Azure Portal where I can check if Easy Auth is on/off in the SWA.

How can I make sure that it's off?