Apache HTTP client is removed completely in upcoming Android M. The Authz module uses the HttpStatus class in the OAuth2AuthzModule. It easily can be replaced with HttpURLConnection constants usage or even using a custom class with self-declared constants. It is possible that other modules are using it as well, for example, Pipe, so it needs to be checked as well.