https://deepquest.code511.com/blog/2019/06/spring-security-oauth-2-3-open-redirection/
Spring Security OAuth 2.3 Open Redirection