Spring Security config to use ADFS and extract additional attributes from JWT

SecurityConfig.java

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {// @formatter:off
        http.cors()
            .and()
              .authorizeRequests()
                .antMatchers(HttpMethod.GET, "/user/info", "/api/foos/**")
                    .hasRole("User")
                .antMatchers(HttpMethod.POST, "/api/foos")
                    .hasRole("Admin")
                .anyRequest()
                  .authenticated()
            .and()
              .oauth2ResourceServer()
                .jwt().jwtAuthenticationConverter(getJwtAuthenticationConverter());
    }

    private Converter<Jwt, AbstractAuthenticationToken> getJwtAuthenticationConverter() {
        JwtAuthenticationConverter converter = new JwtAuthenticationConverter();
        converter.setJwtGrantedAuthoritiesConverter(jwt -> getRoleCollection(jwt.getClaim("rol")).stream().map(s -> new SimpleGrantedAuthority("ROLE_" + s)).collect(Collectors.toList()));
        return converter;
    }

    @SuppressWarnings("unchecked")
    private Collection<String> getRoleCollection(Object roles) {
        if (roles instanceof String) {
            return Collections.singletonList(roles.toString());
        } else if (roles instanceof Collection) {
            return (Collection<String>)roles;
        } else {
            return Collections.emptyList();
        }
    }
}