@Override
    public Optional<JwtContext> getJwtContext(final String jwt) {
        LOGGER.debug("getJwtContext called for jwt: {}", jwt);
        final JwsParts jwsParts = parseJws(jwt);
        if (isAwsSignedToken(jwsParts)) {
            return getAwsJwtContext(jwsParts);
        } else {
            return getStandardJwtContext(jwt);
        }
    }
Verify the JSON Web Signature and then extract the user identity from it
stroom-security/stroom-security-common-impl/src/main/java/stroom/security/common/impl/StandardJwtContextFactory.java