anchor.diff:  }
   ```
   
  -[[oauth2resourceserver-validation]]
  +[[oauth2resourceserver-jwt-validation]]
   === Configuring Validation
   
  -Using <<oauth2resourceserver-minimalconfiguration,minimal Spring Boot configuration>>, indicating the authorization server's issuer uri, Resource Server will default to verifying the `iss` claim as well as the `exp` and `nbf` timestamp claims.
  +Using <<oauth2resourceserver-jwt-minimalconfiguration,minimal Spring Boot configuration>>, indicating the authorization server's issuer uri, Resource Server will default to verifying the `iss` claim as well as the `exp` and `nbf` timestamp claims.
   
   In circumstances where validation needs to be customized, Resource Server ships with two standard validators and also accepts custom `OAuth2TokenValidator` instances.
   
  -[[oauth2resourceserver-validation-clockskew]]
  +[[oauth2resourceserver-jwt-validation-clockskew]]
   ==== Customizing Timestamp Validation
   
   JWT's typically have a window of validity, with the start of the window indicated in the `nbf` claim and the end indicated in the `exp` claim.
  
positive.code: }
  ```
  
  [[oauth2resourceserver-claimsetmapping]]
  === Configuring Claim Set Mapping
  
  Spring Security uses the https://bitbucket.org/connect2id/nimbus-jose-jwt/wiki/Home[Nimbus] library for parsing JWTs and validating their signatures.
  
negative.code: ```
  This will keep all the defaults, except it will override the default claim converter for `sub`.
  
  [[oauth2resourceserver-jwt-claimsetmapping-add]]
  ==== Adding a Claim
  
  `MappedJwtClaimSetConverter` can also be used to add a custom claim, for example, to adapt to an existing system:
  