Authentication with Azure AAD Oauth2 using OBO flow in spring boot - spring-boot

Question

Currently I'm following this guide to enable application type web_application_and_resource_server (reactjs app and spring boot in one application).
And then I have 2 apps called WebApiA and WebApiB, my web_application_and_resource_server need to call to WebApiA which then make a call to WebApiB using OBO flow.
I enabled OBO and expose nessessary APIs exactly the same as this guide for WebApp, WebApiA and WebApiB.
But when I make an api call from my web_application_and_resource_server I get this error in the console:
java.lang.IllegalStateException: Unsupported token implementation class org.springframework.security.oauth2.client.authentication.OAuth2AuthenticationToken
at com.azure.spring.cloud.autoconfigure.aad.implementation.webapi.AadOboOAuth2AuthorizedClientProvider.getOboAuthorizedClient(AadOboOAuth2AuthorizedClientProvider.java:115) ~[spring-cloud-azure-autoconfigure-4.1.0.jar:4.1.0]
at com.azure.spring.cloud.autoconfigure.aad.implementation.webapi.AadOboOAuth2AuthorizedClientProvider.authorize(AadOboOAuth2AuthorizedClientProvider.java:92) ~[spring-cloud-azure-autoconfigure-4.1.0.jar:4.1.0]
at org.springframework.security.oauth2.client.DelegatingOAuth2AuthorizedClientProvider.authorize(DelegatingOAuth2AuthorizedClientProvider.java:71) ~[spring-security-oauth2-client-5.6.5.jar:5.6.5]
at org.springframework.security.oauth2.client.web.DefaultOAuth2AuthorizedClientManager.authorize(DefaultOAuth2AuthorizedClientManager.java:176) ~[spring-security-oauth2-client-5.6.5.jar:5.6.5]
at org.springframework.security.oauth2.client.web.method.annotation.OAuth2AuthorizedClientArgumentResolver.resolveArgument(OAuth2AuthorizedClientArgumentResolver.java:137) ~[spring-security-oauth2-client-5.6.5.jar:5.6.5]
This is the code in the controller that cause the error:
#PostMapping("/webApiA")
public ResponseEntity<String> createDeployment(
#RegisteredOAuth2AuthorizedClient("webApiA") OAuth2AuthorizedClient client,
#RequestBody Object body
) {
return new ResponseEntity<>(callWebApiA(client, body), HttpStatus.OK);
}
private String callWebApiA(OAuth2AuthorizedClient client, Object reqBody) {
if (null != client) {
String body = this.webClient
.post()
.uri("http://localhost:8181/webApiA")
.body(BodyInserters.fromValue(JSONStringUtils.toJSONString(reqBody.toString())))
.attributes(oauth2AuthorizedClient(client))
.retrieve()
.bodyToMono(String.class)
.block();
return "webapiB response " + (null != body ? "success." : "failed.") + body;
} else {
return "webapiB response failed.";
}
}
Here is my application.yaml for my web_application_and_resource_server:
spring:
cloud:
azure:
active-directory:
enabled: true
post-logout-redirect-uri: 'http://localhost:8080/'
profile:
tenant-id: ${mytennantID}
credential:
client-id: ${myappid}
client-secret: ${mysecret}
app-id-uri: ${myappidurl}
application-type: web_application_and_resource_server # This is required.
authorization-clients:
graph:
authorizationGrantType: authorization_code # This is required.
scopes:
- https://graph.microsoft.com/.default
webApiA:
authorization-grant-type: on_behalf_of
scopes:
- api://${WEB_API_A_APP_ID_URL}/Obo.WebApiA.ExampleScope
Can someone help me, thank you very much, I have been stuck on this for 2 days.