Would have been an enumeration more appropriate here ? I'm surprised that these constants are not already defined in the Spring Security OAuth library.