anchor.diff:      }
   
       private Map<String, Object> verifyToken(String token) throws NoSuchAlgorithmException, InvalidKeyException, IOException, SignatureException, JWTVerifyException {
  -        JWTVerifier verifier = new JWTVerifier(secret, audience);
  +        JWTVerifier verifier = new JWTVerifier(secret, audience); <1>
           return verifier.verify(token);
       }
   
  -    private List<String> findPermissions(Map<String, Object> tokenInfo) {
  +    private List<String> findPermissions(Map<String, Object> tokenInfo) {<2>
           List<String> permissions = new ArrayList<>();
           Map<String, Object> appMetadata = (Map<String, Object>) tokenInfo.get("app_metadata");
           if (appMetadata == null) {
  
positive.code:     }
  }
  -------
  https://gist.githubusercontent.com/cdelmas/826d38d5eccebdb1ff9e/raw/a36d5f9e42f65bdc50d67d6d56757d8ea9e2e5c9/Auth0TokenVerifier.java[source]
  
  Last, you just write a `User` class extending `AbstractUser` to handle the authorities:
  
  
negative.code: Vertx provides a way to handle JWT, it is as easy as adding a handler:
  
  [source,java]
  .https://gist.githubusercontent.com/cdelmas/dcb45c703a25249147fe/raw/78155e103a0dcaa0714ac1d5e6109482489edba5/Main.java[source]
  -------
  AuthHandler authHandler = JWTAuthHandler.create(new Auth0TokenVerifier("myapp", applicationId, applicationSecret));
  authHandler.addAuthority("create:user"); <2>
  