Currently, the auto-configured JwtAuthenticationConverter (defined in OAuth2ResourceServerJwtConfiguration) uses a JwtGrantedAuthoritiesConverter. It would be nice if an ExpressionJwtGrantedAuthoritiesConverter would be used if there is a property spring.security.oauth2.resourceserver.jwt.authorities-claim-expression.