spring security oauth2 hasScope xml 安全升级到什么方法？

Question

As spring-security-oauth2 obsoleted ref: EOL for Spring Security OAuth ,
cannot use #oauth2.hasScope([scope]) in xml config provided by OAuth2SecurityExpressionMethods.java

Expected to see ast parser or similar handler in either spring-security-oauth2-jose , spring-security-oauth2-client , spring-security-oauth2-core to accomplish that in the following example, #oauth2 security expressions on method level .

Is there something i missed for xml config for oauth2 scope checking?
Or i must implement it by hasAuthority('SCOPE_[scope]')

thanks

Answer 1

have to switch to hasAuthority("SCOPE_scope")
Spring Security converts scopes that follow the granted authority naming convention
ref: OAuth 2.0 Migration Guide