noRoles

Returns a mapper that always yields an empty set.

This is the default when no mapper is configured. Authorization rules that require specific roles will never match; use only when protected routes rely solely on authenticated / allow. Always returns the same instance, so jwt.rolesMapper can be compared against it to detect whether a caller configured a non-default mapper.