Putting this logic in ``AbstractResourceOwner`` means it is done for both OAuth1 and OAuth2. Is it really the intended behavior ?

If it is only for OAuth2 as said in your PR description, it should be kept in the GenericOAuth2ResourceOwner and the code implementation should be done in it