Jmix FlowUI + OAuth2 Login (WSO2): Application requires JwtDecoder although I only use oauth2-client (no resource server)

Hi Jmix team,

I’m integrating OAuth2 Login (Authorization Code flow) into a Jmix FlowUI application
using an external Identity Provider (WSO2 Identity Server).

My goal:

  • Use OAuth2 Login only (redirect to IdP and back)
  • NOT use Resource Server
  • NOT validate JWTs inside my application
  • Authenticate users via external IdP and then log them into Jmix

However, the application fails to start with the following error:


Parameter 0 of method setFilterChains in
org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration
required a bean of type ‘org.springframework.security.oauth2.jwt.JwtDecoder’
that could not be found.

This looks like Spring Security / Jmix treats my app as a Resource Server,
although I only want OAuth2 Login.
Ảnh màn hình 2026-01-12 lúc 17.24.21
Ảnh màn hình 2026-01-12 lúc 17.24.41