anchor.diff:  
        OAuth2TokenValidator<Jwt> withClockSkew = new DelegatingOAuth2TokenValidator<>(
               new JwtTimestampValidator(Duration.ofSeconds(60)),
  -            new IssuerValidator(issuerUri));
  +            new JwtIssuerValidator(issuerUri));
   
        jwtDecoder.setJwtValidator(withClockSkew);
   
  
positive.code: ```java
  @Bean
  public JwtDecoder jwtDecoder(CacheManager cacheManager) {
      return NimbusJwtDecoder.withJwtSetUri(jwkSetUri)
              .cache(cacheManager.getCache("jwks"))
              .build();
  }
  
negative.code:     private static class ParseOnlyJWTProcessor extends DefaultJWTProcessor<SecurityContext> {
      	JWTClaimsSet process(SignedJWT jwt, SecurityContext context)
                  throws JOSEException {
              return jwt.getJWTClaimsSet();
          }
      }
  }
  