docs: public Authentication createAuthentication(HttpServletRequest request, ConsumerAuthentication authentication, OAuthAccessProviderToken authToken) {
      if (authToken != null) {
        Authentication userAuthentication = authToken.getUserAuthentication();
        if (userAuthentication instanceof AbstractAuthenticationToken) {
          //initialize the details with the consumer that is actually making the request on behalf of the user.
          ((AbstractAuthenticationToken) userAuthentication).setDetails(new OAuthAuthenticationDetails(request, authentication.getConsumerDetails()));
        }
        return userAuthentication;
      }
  
      return authentication;
    }