Configuring Spring Web Security with OAuth

WebSecurityConfig.groovy

    @Configuration
    @Order(-20)
    static class WebSecurityConfig extends WebSecurityConfigurerAdapter {

        @Override
        @Bean
        AuthenticationManager authenticationManagerBean() throws Exception {
          super.authenticationManagerBean()
        }

        @Override
        protected void configure(HttpSecurity http) throws Exception {
            http
                    .formLogin().loginPage('/login').permitAll()
                    .and().httpBasic().and()
                    .requestMatchers()
                    //specify urls handled
                    .antMatchers("/login", "/oauth/authorize", "/oauth/confirm_access")
                    .antMatchers("/fonts/**", "/js/**", "/css/**")
                    .and()
                    .authorizeRequests()
                    .antMatchers("/fonts/**", "/js/**", "/css/**").permitAll()
                    .anyRequest().authenticated()
        }

        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
            auth.inMemoryAuthentication()
                    .withUser('reader')
                    .password('reader')
                    .authorities('ROLE_READER')
                    .and()
                    .withUser('guest')
                    .password('guest')
                    .authorities('ROLE_GUEST')
        }
    }