I would expect a service with an url finishing with ```/oauth2.0/callbackAuthorize``` to stay close from what we had previously... I think it has still the same meaning : it's an internal service, right ?