visible claims: "sub", "name", "family_name", "given_name", "email","tenant"
{ "path": "/", "principal": null, "signatureValid": false }