pub fn allowed_roles(claims: &HashMap<String, Value>) -> Vec<String>Expand description
The roles a token allows its bearer to ask to be.
Empty where the claim is absent or is not a list of names, which is the reading that grants nothing: the list is what widens an identity, so a value that cannot be read as one must not widen it.