We have an application which is using spring-security-oauth2:1.0. I was trying to change it to a newer version, spring-security-oauth2:2.0.7.RELEASE
spring-security-oauth2:1.0
spring-security-oauth2:2.0.7.RELEASE
The problem can be because of opening all requests. You should remove it.
@Override public void configure(WebSecurity web) throws Exception { web .ignoring() .antMatchers("/**"); }