Describe the bug
When I use spring-security-oauth2-autoconfigure, my server returns me the authorities information in the check_token interface, for example
{
"authorities": [rolea,roleb,rolec.....]
}
Then I got those permissions, and when I migrated to spring-boot-starter-oauth2-client, the authorities failed and he wouldn't add any roles for my users, which made it impossible for me to control the permissions
Here's a screenshot of the code for spring-security-oauth2-autoconfigure to add user permissions
And when using spring-boot-starter-oauth2-client, I don't see anywhere that
authorities is used
To Reproduce Steps to reproduce the behavior.
Expected behavior A clear and concise description of what you expected to happen.
Sample
A link to a GitHub repository with a minimal, reproducible sample.
Reports that include a sample will take priority over reports that do not. At times, we may require a sample, so it is good to try and include a sample up front.
Comment From: funky-eyes
It will never use my permissions, the list of permissions is fixed to only two now
Comment From: funky-eyes
Resolved by customizing GrantedAuthoritiesMapper