anchor.diff:  
   An authorization server's JWK Set Uri can be configured <<webflux-oauth2resourceserver-jwt-jwkseturi,as a configuration property>> or it can be supplied in the DSL:
   
  -[source,java]
  +====
  +.Java
  +[source,java,role="primary"]
   ----
   @Bean
   SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
  
positive.code: 
  An authorization server's Introspection Uri can be configured <<webflux-oauth2resourceserver-opaque-introspectionuri,as a configuration property>> or it can be supplied in the DSL:
  
  [source,java]
  ----
  @EnableWebFluxSecurity
  public class DirectlyConfiguredIntrospectionUri {
  
negative.code: }
  ----
  
  .Kotlin
  [source,kotlin,role="secondary"]
  ----
  @Bean
  fun jwtDecoder(): ReactiveJwtDecoder {
      return NimbusReactiveJwtDecoder.withJwkSetUri(this.jwkSetUri)
              .jwsAlgorithm(RS512).build()
  }
  ----
  ====
  
  Calling `jwsAlgorithm` more than once will configure `NimbusReactiveJwtDecoder` to trust more than one algorithm, like so:
  
  ====
  .Java
  [source,java,role="primary"]
  ----
  @Bean
  ReactiveJwtDecoder jwtDecoder() {
  