Claims

Also written: claim, sub, iat, exp

The facts inside a JWT's payload: `sub` (who), `iat` (issued at), `exp` (expires) and extras like `roles`.