Describe the bug When I use spring-security-oauth2-autoconfigure, my server returns me the authorities information in the check_token interface, for example { "authorities": [rolea,roleb,rolec.....] } Then I got those permissions, and when I migrated to spring-boot-starter-oauth2-client, the authorities failed and he wouldn't add any roles for my users, which made it impossible for me to control the permissions Here's a screenshot of the code for spring-security-oauth2-autoconfigure to add user permissions Spring Security spring-security-oauth2-autoconfigure migrating to spring-boot-starter-oauth2-client And when using spring-boot-starter-oauth2-client, I don't see anywhere that authorities is used Spring Security spring-security-oauth2-autoconfigure migrating to spring-boot-starter-oauth2-client

To Reproduce Steps to reproduce the behavior.

Expected behavior A clear and concise description of what you expected to happen.

Sample

A link to a GitHub repository with a minimal, reproducible sample.

Reports that include a sample will take priority over reports that do not. At times, we may require a sample, so it is good to try and include a sample up front.

Comment From: funky-eyes

It will never use my permissions, the list of permissions is fixed to only two now Spring Security spring-security-oauth2-autoconfigure migrating to spring-boot-starter-oauth2-client

Comment From: funky-eyes

Resolved by customizing GrantedAuthoritiesMapper