Java – Spring Oauth2 redirect URI has not changed

I’m doing OAuth2 authorization in Spring and trying to implement the authorization code grant flow. Now I have two apps. Client and authorization server side. When I open the secure /client/hello, it redirects me to the oauth2 login page, followed by a get /oauth/authorize link, but the value in redirect_uri is always the client's login page and doesn’t even change manually in the browser. How can I change it? If I change the redirect URI to /client/login in the authentication server configuration, it redirects and gives me an authorization code, but throws an unauthorized error.

Client

Controller :

@RestController
public class Controller {
    @GetMapping("/hello")
    public String hello() {
        return "Hello world!!";
    }

@GetMapping("/public")
    public String publicPage() {
        return "This is public!!";
    }

@GetMapping("/callback")
    public String login(@RequestParam("code") String code) {
        return code;
    }
}

Client Security Configuration:

@Configuration
@EnableOAuth2Sso
public class ClientSecurityConfig extends WebSecurityConfigurerAdapter {

@Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers("/error**", "/public**").permitAll()
                .anyRequest().authenticated();
    }
}

Client properties:

security.oauth2.client.client-id=007314
security.oauth2.client.client-secret=MDA3MzE0
security.oauth2.client.grant-type=password
security.oauth2.client.scope=read
security.oauth2.client.pre-established-redirect-uri=http://localhost:8081/client/public
security.oauth2.client.access-token-uri=http://localhost:8082/auth/oauth/token
security.oauth2.client.user-authorization-uri=http://localhost:8082/auth/oauth/authorize
security.oauth2.client.authentication-scheme=form
security.oauth2.resource.user-info-uri=http://localhost:8081/client/hello
security.oauth2.resource.id=resource-server-rest-api

server.port=8081
server.servlet.context-path=/client

Authorization server
Server configuration:

@Configuration
@EnableAuthorizationServer
public class AuthorizationServer extends AuthorizationServerConfigurerAdapter {

private final PasswordEncoder passwordEncoder;
    @Qualifier("authenticationManagerBean")
    private final AuthenticationManager authenticationManager;

@Autowired
    public AuthorizationServer(PasswordEncoder passwordEncoder, AuthenticationManager authenticationManager) {
        this.passwordEncoder = passwordEncoder;
        this.authenticationManager =  authenticationManager;
    }

@Override
    public void configure(AuthorizationServerSecurityConfigurer security) {
        security.tokenKeyAccess("permitAll()")
                .checkTokenAccess("isAuthenticated()")
                .passwordEncoder(passwordEncoder)
                .allowFormAuthenticationForClients();
    }

@Override
    public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
        clients.inMemory()
                .withClient("007314")
                .secret(passwordEncoder.encode("007314"))
                .authorizedGrantTypes("authorization_code", "refresh_token")
                .scopes("read")
                .resourceIds("resource-server-rest-api")
                .autoApprove(true)
                .redirectUris("http://localhost:8081/client/hello");
    }

@Bean
    public TokenStore tokenStore(){
        return new JwtTokenStore(defaultAccessTokenConverter());
    }
    @Bean
    public JwtAccessTokenConverter defaultAccessTokenConverter() {
        JwtAccessTokenConverter converter = new JwtAccessTokenConverter();
        converter.setSigningKey("123");
        return converter;
    }

@Override
    public void configure(AuthorizationServerEndpointsConfigurer endpoints) {
        endpoints.tokenStore(tokenStore())
                .accessTokenConverter(defaultAccessTokenConverter())
                .authenticationManager(authenticationManager);
    }
}

Server Security Configuration:

@EnableWebSecurity
@Order(1)
public class ServerSecurityConfig extends WebSecurityConfigurerAdapter {

@Override
    @Bean
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }

@Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }

@Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.inMemoryAuthentication().passwordEncoder(passwordEncoder())
                .withUser("qwerty")
                .password(passwordEncoder().encode("12345"))
                .roles("USER");
    }

@Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers("/error**", "/login**", "/oauth/authorize**").permitAll()
                .anyRequest().authenticated()
                .and()
                .formLogin().permitAll();
    }
}

Resource Server

@Configuration
@EnableResourceServer
public class ResourceServerConfig extends ResourceServerConfigurerAdapter {

private static final String RESOURCE_ID = "resource-server-rest-api";
    @Override
    public void configure(ResourceServerSecurityConfigurer resources) {
        resources.resourceId(RESOURCE_ID);
    }
    @Override
    public void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers(HttpMethod.GET, "/client/hello").access("#oauth2.hasScope('read')");
    }
}

Server Properties:

server.port=8082
server.servlet.context-path=/auth

Also add: security.oauth2.client.useCurrentUri=false to client.properties.