anchor.diff:  
   
   This guide describes the integration of Spring security's OAuth2 client.
  -
  -WARNING: Using this extension with the REST API may fail.
  -See <<caveats,below>> for more details.
  +Authentication is done via OAuth2 and authorization via Shiro.
   
   include::docs:mavendeps:partial$setup-and-configure-dependencyManagement.adoc[leveloffset=+1]
   
  
positive.code: @Configuration
  @Import({
          ...
          IsisModuleExtSpringOAuth2.class,
          LoginController.class,
          ...
  })
  public class AppManifest {
  }
  ----
  
  Lastly (and optionally), the swagger/REST API is not configured for oauth2, so we replace the `index.html` page with one to redirect straight to the xref:vw::about.adoc[Wicket Viewer]:
  
negative.code: @Import({
          ...
          IsisModuleExtSpringSecurityOAuth2.class,
          AuthorizorShiro.class,
          ...
  })
  public class AppManifest {
  