@Override
    public Optional<JwtContext> getJwtContext(final HttpServletRequest request) {

        if (LOGGER.isTraceEnabled()) {
            // Only output non-null ones. Probably the only useful one is the ID one as the rest are base64 encoded
            final String headers = Stream.of(
                            AUTHORIZATION_HEADER,
                            AMZN_OIDC_ACCESS_TOKEN_HEADER,
                            AMZN_OIDC_IDENTITY_HEADER,
                            AMZN_OIDC_DATA_HEADER)
                    .map(key -> new SimpleEntry<>(key, request.getHeader(key)))
                    .filter(entry -> entry.getValue() != null)
                    .map(keyValue -> "\n  " + keyValue.getKey() + ": '" + keyValue.getValue() + "'")
                    .collect(Collectors.joining(" "));
            LOGGER.trace("getJwtContext called for request with uri: {}, headers:{}",
                    request.getRequestURI(), headers);
        }

        return getTokenFromHeader(request)
                .flatMap(this::getJwtContextFromHeaderToken)
                .or(() -> {
                    LOGGER.debug(() -> "No JWS found in headers in request to " + request.getRequestURI());
                    return Optional.empty();
                });
    }
The user claims, in JSON web tokens (JWT) format.
stroom-security/stroom-security-common-impl/src/main/java/stroom/security/common/impl/StandardJwtContextFactory.java