Currently OAuth2Auth inherits AuthProvider via the intermediate AuthProviderInternal interface. OAuth2Auth should directly extend it and AuthProviderInternal should be rather only implemented by OAuth2AuthProviderImpl. Code relying on this should use the instanceof operator to check when the provider is actually internal and make a cast (which is likely the case already).