sample code for resource server protection with JwkTokenStore
http://www.baeldung.com/spring-security-oauth-2-verify-claims
https://github.com/spring-projects/spring-security-oauth/blob/master/docs/oauth2.md
https://docs.spring.io/spring-boot/docs/current/reference/html/boot-features-security.html