title: Spring OAuth2 Resource Server Filter
body: <p>We are using the <code>@EnableResourceServer</code> annotation to apply the security filter for all our APIs. We are using <strong>Spring OAuth2 and JWT tokens</strong>. We use both client credentials token (obtained using client-id and client secret) and User token (using name/password)</p>
  
  <p>We want to protect certain endpoints <code>(**/clientTokenAllowed/myapi)</code> using the client JWT token, whereas all others would need a user JWT token.  </p>
  
  <p>Where should I put this validation check in the filter? Could not find the right example to do this. </p>