Since #1104 was introduced, all providers must use the CrendentialProvider instance to get/set the token instead of doing it internally.
The OAuth2 provider does not do that and keep doing it internally which introduce an behaviour exception and may limit the scope of the usage for CrendentialProvider