protected Optional<JWTClaimsSet> parseJwtAccessToken(final String token) {
        try {
            return accessTokenJwtBuilder
                .stream()
                .map(builder -> {
                    val decodableCipher = OAuth20JwtAccessTokenEncoder.toDecodableCipher(builder);
                    val accessTokenId = decodableCipher.decode(token);
                    return getJwtClaimsSetFromAccessToken(accessTokenId);
                })
                .filter(Optional::isPresent)
                .map(Optional::get)
                .findFirst();
        } catch (final Exception e) {
            LOGGER.debug(e.getMessage(), LOGGER.isTraceEnabled() ? e : null);
            return Optional.empty();
        }
    }
This is {@link DefaultAuthorizationPrincipalParser}.

@author Misagh Moayyed
@since 7.2.0
support/cas-server-support-heimdall/src/main/java/org/apereo/cas/heimdall/engine/DefaultAuthorizationPrincipalParser.java