Claims used as authorities source should be split on space and comma (and trimmed)

[ch4mpy]

Describe the bug When scope claim (or scp) is used as source for authorities, space separated values are interpreted as a single value. It should not.

Code sample

com:
  c4-soft:
    springaddons:
      security:
        issuers:
        - location: ${oauth2-issuer}
          username-claim: $['https://c4-soft.com/user']['name']
          authorities:
          - path: $.scope
            prefix: SCOPE_

Expected behavior Each scope entry in the scope claim should be mapped to an individual GrantedAuthority (each prefixed with SCOPE_ in the sample above)