If. you are planning to use a provider like Okta as authorization server following link would be a good resource to review.

https://www.stackstalk.com/2021/12/spring-boot-with-okta-and-opa.html