Spring Security Parameters customizer called before all parameters are set

The parametersCustomizer in DefaultOAuth2TokenRequestParametersConverter cannot customize parameters that are added afterwards. The customizer can be moved to AbstractRestClientOAuth2AccessTokenResponseClient and AbstractWebClientReactiveOAuth2AccessTokenResponseClient to allow customizing all parameters.