private Optional<JwtContext> getJwtContextFromHeaderToken(final HeaderToken headerToken) {
        final Optional<JwtContext> optJwtContext;
        final JwsParts jwsParts = parseJws(headerToken.jwt);

        if (isAwsSignedToken(headerToken, jwsParts)) {
            optJwtContext = getAwsJwtContext(jwsParts);
        } else {
            optJwtContext = getStandardJwtContext(headerToken.jwt);
        }

        LOGGER.debug(() -> LogUtil.message("jwtClaims:\n{}",
                optJwtContext.map(JwtContext::getJwtClaims)
                        .map(jwtClaims -> jwtClaims.getClaimsMap()
                                .entrySet()
                                .stream()
                                .sorted(Entry.comparingByKey())
                                .map(entry ->
                                        "  " + entry.getKey() + ": '" + entry.getValue().toString() + "'")
                                .collect(Collectors.joining("\n")))
                        .orElse("  <empty>")));

        return optJwtContext;
    }
The user claims, in JSON web tokens (JWT) format.
stroom-security/stroom-security-common-impl/src/main/java/stroom/security/common/impl/StandardJwtContextFactory.java