anchor.diff:  static class CustomAuthenticationConverter implements Converter<Jwt, AbstractAuthenticationToken> {
       public AbstractAuthenticationToken convert(Jwt jwt) {
           return new CustomAuthenticationToken(jwt);
  +    }
  +}
  +
  +// ...
  +
  +@EnableWebSecurity
  +public class CustomAuthenticationConverterConfig extends WebSecurityConfigurerAdapter {
  +    protected void configure(HttpSecurity http) {
  +        http
  +            .authorizeRequests(authorize -> authorize
  +                .anyRequest().authenticated()
  +            )
  +            .oauth2ResourceServer(oauth2 -> oauth2
  +                .jwt(jwt -> jwt
  +                    .jwtAuthenticationConverter(new CustomAuthenticationConverter())
  +                )
  +            );
       }
   }
   ----
  
positive.code: .Java
  [source,java,role="primary"]
  ----
  @EnableWebSecurity
  public class CustomAuthoritiesClaimName extends WebSecurityConfigurerAdapter {
      protected void configure(HttpSecurity http) {
          http
              .authorizeRequests(authorize -> authorize
                  .anyRequest().authenticated()
              )
              .oauth2ResourceServer(oauth2 -> oauth2
                  .jwt(jwt -> jwt
                      .jwtAuthenticationConverter(jwtAuthenticationConverter())
                  )
              );
      }
  }
  
  JwtAuthenticationConverter jwtAuthenticationConverter() {
      JwtGrantedAuthoritiesConverter grantedAuthoritiesConverter = new JwtGrantedAuthoritiesConverter();
      grantedAuthoritiesConverter.setAuthoritiesClaimName("authorities");
  
  
negative.code: .Java
  [source,java,role="primary"]
  ----
  @Bean
  public JwtAuthenticationConverter jwtAuthenticationConverter() {
      JwtGrantedAuthoritiesConverter grantedAuthoritiesConverter = new JwtGrantedAuthoritiesConverter();
      grantedAuthoritiesConverter.setAuthorityPrefix("ROLE_");
  
  