Polish javadoc gh-7511

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/ClientCredentialsOAuth2AuthorizedClientProvider.java

@@ -108,7 +108,10 @@ public final class ClientCredentialsOAuth2AuthorizedClientProvider implements OA
 	/**
 	 * Sets the maximum acceptable clock skew, which is used when checking the
 	 * {@link OAuth2AuthorizedClient#getAccessToken() access token} expiry. The default is 60 seconds.
-	 * An access token is considered expired if it's before {@code Instant.now(this.clock) - clockSkew}.
+	 *
+	 * <p>
+	 * An access token is considered expired if {@code OAuth2AccessToken#getExpiresAt() - clockSkew}
+	 * is before the current time {@code clock#instant()}.
 	 *
 	 * @param clockSkew the maximum acceptable clock skew
 	 */

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/ClientCredentialsReactiveOAuth2AuthorizedClientProvider.java

@@ -101,7 +101,10 @@ public final class ClientCredentialsReactiveOAuth2AuthorizedClientProvider imple
 	/**
 	 * Sets the maximum acceptable clock skew, which is used when checking the
 	 * {@link OAuth2AuthorizedClient#getAccessToken() access token} expiry. The default is 60 seconds.
-	 * An access token is considered expired if it's before {@code Instant.now(this.clock) - clockSkew}.
+	 *
+	 * <p>
+	 * An access token is considered expired if {@code OAuth2AccessToken#getExpiresAt() - clockSkew}
+	 * is before the current time {@code clock#instant()}.
 	 *
 	 * @param clockSkew the maximum acceptable clock skew
 	 */

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/PasswordOAuth2AuthorizedClientProvider.java

@@ -126,7 +126,10 @@ public final class PasswordOAuth2AuthorizedClientProvider implements OAuth2Autho
 	/**
 	 * Sets the maximum acceptable clock skew, which is used when checking the
 	 * {@link OAuth2AuthorizedClient#getAccessToken() access token} expiry. The default is 60 seconds.
-	 * An access token is considered expired if it's before {@code Instant.now(this.clock) - clockSkew}.
+	 *
+	 * <p>
+	 * An access token is considered expired if {@code OAuth2AccessToken#getExpiresAt() - clockSkew}
+	 * is before the current time {@code clock#instant()}.
 	 *
 	 * @param clockSkew the maximum acceptable clock skew
 	 */

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/PasswordReactiveOAuth2AuthorizedClientProvider.java

@@ -121,7 +121,10 @@ public final class PasswordReactiveOAuth2AuthorizedClientProvider implements Rea
 	/**
 	 * Sets the maximum acceptable clock skew, which is used when checking the
 	 * {@link OAuth2AuthorizedClient#getAccessToken() access token} expiry. The default is 60 seconds.
-	 * An access token is considered expired if it's before {@code Instant.now(this.clock) - clockSkew}.
+	 *
+	 * <p>
+	 * An access token is considered expired if {@code OAuth2AccessToken#getExpiresAt() - clockSkew}
+	 * is before the current time {@code clock#instant()}.
 	 *
 	 * @param clockSkew the maximum acceptable clock skew
 	 */

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/RefreshTokenOAuth2AuthorizedClientProvider.java

@@ -116,7 +116,10 @@ public final class RefreshTokenOAuth2AuthorizedClientProvider implements OAuth2A
 	/**
 	 * Sets the maximum acceptable clock skew, which is used when checking the
 	 * {@link OAuth2AuthorizedClient#getAccessToken() access token} expiry. The default is 60 seconds.
-	 * An access token is considered expired if it's before {@code Instant.now(this.clock) - clockSkew}.
+	 *
+	 * <p>
+	 * An access token is considered expired if {@code OAuth2AccessToken#getExpiresAt() - clockSkew}
+	 * is before the current time {@code clock#instant()}.
 	 *
 	 * @param clockSkew the maximum acceptable clock skew
 	 */

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/RefreshTokenReactiveOAuth2AuthorizedClientProvider.java

@@ -112,7 +112,10 @@ public final class RefreshTokenReactiveOAuth2AuthorizedClientProvider implements
 	/**
 	 * Sets the maximum acceptable clock skew, which is used when checking the
 	 * {@link OAuth2AuthorizedClient#getAccessToken() access token} expiry. The default is 60 seconds.
-	 * An access token is considered expired if it's before {@code Instant.now(this.clock) - clockSkew}.
+	 *
+	 * <p>
+	 * An access token is considered expired if {@code OAuth2AccessToken#getExpiresAt() - clockSkew}
+	 * is before the current time {@code clock#instant()}.
 	 *
 	 * @param clockSkew the maximum acceptable clock skew
 	 */