anchor.diff:      }
   }
   ----
  +
  +.Xml
  +[source,xml,role="secondary"]
  +----
  +<http>
  +    <intercept-uri pattern="/contacts/**" access="hasAuthority('SCOPE_contacts')"/>
  +    <intercept-uri pattern="/messages/**" access="hasAuthority('SCOPE_messages')"/>
  +    <oauth2-resource-server>
  +        <jwt jwk-set-uri="https://idp.example.org/.well-known/jwks.json"/>
  +    </oauth2-resource-server>
  +</http>
  +----
   ====
   
   Or similarly with method security:
  
positive.code:         .bearerTokenResolver(resolver)
      );
  ----
  
  === Bearer Token Propagation
  
  
negative.code:     }
  }
  ----
  
  .Xml
  [source,xml,role="secondary"]
  ----
  <http>
      <intercept-uri pattern="/**" access="authenticated"/>
      <oauth2-resource-server>
          <jwt decoder-ref="myCustomDecoder"/>
      </oauth2-resource-server>
  </http>
  ----
  ====
  
  This is handy when deeper configuration, like <<oauth2resourceserver-jwt-validation,validation>>, <<oauth2resourceserver-jwt-claimsetmapping,mapping>>, or <<oauth2resourceserver-jwt-timeouts,request timeouts>>, is necessary.
  