From b05b25f2d635908a8880e9fce3990c41c9ded9f4 Mon Sep 17 00:00:00 2001
From: Andrey Litvitski <andrey1010102008@gmail.com>
Date: Mon, 2 Mar 2026 21:22:47 +0300
Subject: [PATCH] Update opaque-token.adoc for
 RestClientOpaqueTokenIntrospector

Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
---
 .../oauth2/resource-server/opaque-token.adoc  | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/docs/modules/ROOT/pages/servlet/oauth2/resource-server/opaque-token.adoc b/docs/modules/ROOT/pages/servlet/oauth2/resource-server/opaque-token.adoc
index 6c78c32480..456b189099 100644
--- a/docs/modules/ROOT/pages/servlet/oauth2/resource-server/opaque-token.adoc
+++ b/docs/modules/ROOT/pages/servlet/oauth2/resource-server/opaque-token.adoc
@@ -790,6 +790,47 @@ fun introspector(builder: RestTemplateBuilder, properties: OAuth2ResourceServerP
 ----
 ======
 
+[[oauth2resourceserver-opaque-restclient]]
+=== Using `RestClientOpaqueTokenIntrospector`
+
+Alternatively, you can use `RestClientOpaqueTokenIntrospector`, which uses `RestClient` instead of `RestTemplate`.
+This allows using the same configuration while benefiting from the newer `RestClient` API.
+
+[tabs]
+======
+Java::
++
+[source,java,role="primary"]
+----
+@Bean
+public OpaqueTokenIntrospector introspector(RestTemplateBuilder builder, OAuth2ResourceServerProperties properties) {
+    RestTemplate restTemplate = builder
+            .basicAuthentication(properties.getOpaquetoken().getClientId(), properties.getOpaquetoken().getClientSecret())
+            .connectTimeout(Duration.ofSeconds(60))
+            .readTimeout(Duration.ofSeconds(60))
+            .build();
+    RestClient restClient = RestClient.create(restTemplate);
+    return new RestClientOpaqueTokenIntrospector(introspectionUri, restClient);
+}
+----
+
+Kotlin::
++
+[source,kotlin,role="secondary"]
+----
+@Bean
+fun introspector(builder: RestTemplateBuilder, properties: OAuth2ResourceServerProperties): OpaqueTokenIntrospector {
+    val restTemplate = builder
+            .basicAuthentication(properties.opaquetoken.clientId, properties.opaquetoken.clientSecret)
+            .connectTimeout(Duration.ofSeconds(60))
+            .readTimeout(Duration.ofSeconds(60))
+            .build()
+    val restClient = RestClient.create(restTemplate)
+    return RestClientOpaqueTokenIntrospector(introspectionUri, restClient)
+}
+----
+======
+
 [[oauth2resourceserver-opaque-jwt-introspector]]
 == Using Introspection with JWTs