javalin-security-jwt/io.github.mzlnk.javalin.security.jwt/JwtConfig/rolesMapper

rolesMapper

@JvmField
var rolesMapper: JwtRolesMapper

Maps a verified DecodedJwt to the caller's io.javalin.security.RouteRoles.

Defaults to JwtRolesMapper.noRoles. Routes and rules that require specific roles need a non-default mapper such as JwtRolesMapper.fromClaim or JwtRolesMapper.fromScope. Applied regardless of whether identityMapper is set — roles always land on io.github.mzlnk.javalin.security.authentication.Authentication.roles.