Vishva | Vishva - A hindi word for World | Graphics library

1. In the first configuration " InMemoryTokenStore " :
   • Is the standard oauth2 token generation method, mean that one token will be generated for each user and it will be stored ( so when you ask the authorize server for a client's tokens it will fetch for it not generating ) , until the token will expire then another token will be generated

That's why you are getting the same token every time, but when this token will expire the authorize server will generate another one

1. In the second configuration " JwtTokenStore " :
   • Is the standard oauth2 jwt token generation method, mean that every time your ask for a token the authorize server will generate a token for you and doesn't stored it in memory
   • At this point if you are using JWT token, the server need to be stateless mean that no token storage or user information storage because JWT token are self-contained no need for the server to store token or user information

That's why you are getting different token every time, but an empty list

you can check JwtTokenStore class in this link at Line 162, you will find that by default is giving an Empty List

So for standar configuration you should use JwtTokenStore