OAuth2 Resource Server

Spring Boot 4.x ships Spring Security 7 — lambda DSL only; and(), authorizeRequests(), antMatchers(), and AntPathRequestMatcher/MvcRequestMatcher are gone (requestMatchers("/path/**") is backed by PathPatternRequestMatcher).

Dependency

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security-oauth2-resource-server</artifactId>
</dependency>

Security Configuration