Summary
Currently AuthorizationCodeAuthenticationProvider requires JwtDecoderRegistry which is a jwt dependency. However, I believe this should be able to authenticate just a straight OAuth2 exchange.
We should perhaps move the dependency somewhere else.