SHA-256 Algorithm

By default, this implementation uses the SHA-256 algorithm to encode the token signature. To verify the token signature, the algorithm retrieved from algorithmName is parsed and used. If algorithmName is not present, the default matching algorithm will be used, which is SHA-256. You can specify different algorithms for signature encoding and for signature matching; this allows users to safely upgrade to a different encoding algorithm while still being able to verify old ones if algorithmName is not present. To do that, you can specify your customized TokenBasedRememberMeServices as a bean and use it in the configuration:

@Bean
SecurityFilterChain securityFilterChain(HttpSecurity http, RememberMeServices rememberMeServices) throws Exception {
    http
          .authorizeHttpRequests((authorize) -> authorize
              ...