anchor.diff:  ```java
   @Bean
   JwtDecoder jwtDecoder() {
  -    NimbusJwtDecoderJwkSupport jwtDecoder = new NimbusJwtDecoderJwkSupport(jwkSetUri);
  +    NimbusJwtDecoder jwtDecoder = new NimbusJwtDecoder(JwtProcessors.withJwkSetUri(jwkSetUri).build());
   
       MappedJwtClaimSetConverter converter = MappedJwtClaimSetConverter
               .withDefaults(Collections.singletonMap("sub", this::lookupUserIdBySub));
  -    jwtDecoder.setJwtClaimSetConverter(converter);
  +    jwtDecoder.setClaimSetConverter(converter);
   
       return jwtDecoder;
   }
  
positive.code: ```java
  @Bean
  JwtDecoder jwtDecoder() {
      NimbusJwtDecoderJwkSupport jwtDecoder = (NimbusJwtDecoderJwkSupport)
          JwtDecoders.withOidcIssuerLocation(issuerUri);
  
      OAuth2TokenValidator<Jwt> audienceValidator = new AudienceValidator();
  
negative.code: ```java
  @Bean
  public JwtDecoder jwtDecoder() {
      return new NimbusJwtDecoder(JwtProcessors.withJwkSetUri(jwkSetUri).build());
  }
  ```
  
  