!!! need to use this instead of the deprecated spring-security-oauth https://github.com/spring-projects/spring-security/wiki/OAuth-2.0-Migration-Guide https://github.com/jgrandja/spring-security-oauth-5-2-migrate https://github.com/jgrandja/spring-security-oauth-5-2-migrate/blob/master/resource-server/src/main/java/org/springframework/security/oauth/samples/config/ResourceServerConfig.java https://docs.spring.io/spring-security-oauth2-boot/docs/current/reference/htmlsingle/ If you have spring-security-oauth2 on your classpath, you can take advantage of some auto-configuration to simplify setting up Authorization and Resource Servers. For full details, see the Spring Security OAuth 2 Developers Guide. The following projects are in maintenance mode: spring-security-oauth2 spring-security-oauth2-autoconfigure https://docs.spring.io/spring-security-oauth2-boot/docs/current/reference/htmlsingle/#boot-features-security-oauth2-single-sign-on https://docs.spring.io/spring-security-oauth2-boot/docs/current/reference/htmlsingle/#boot-features-security-custom-user-info-client https://projects.spring.io/spring-security-oauth/docs/oauth2.html