private boolean isAwsSignedToken(final HeaderToken headerToken, final JwsParts jwsParts) {
        if (AMZN_OIDC_DATA_HEADER.equals(headerToken.header)) {
            LOGGER.debug("Found header {}", AMZN_OIDC_DATA_HEADER);
            // Request came from an AWS load balancer that did the auth flow
            return true;
        } else {
            // Request may have come from another stroom node that has passed on an AWS signed
            // token, but not in the special AWS header
            return isAwsSignedToken(jwsParts);
        }
    }
The user claims, in JSON web tokens (JWT) format.
stroom-security/stroom-security-common-impl/src/main/java/stroom/security/common/impl/StandardJwtContextFactory.java