JwtAuthenticator

Implements JWT bearer-token authentication.

Extracts the raw token via TokenResolver: missing token yields AuthenticationResult.NotAuthenticated. Calls JwtDecoder.decode with the configured JwtVerification; any thrown exception yields AuthenticationResult.Failure. On success, resolves the identity:

• when identityMapper is set, maps the DecodedJwt to it (null yields AuthenticationResult.Failure);

• otherwise falls back to the default Jwt identity. Roles always come from rolesMapper, independent of which identity is attached.

Construct via jwt { } or Builder.