anchor.diff:  ----
   @GetMapping("/endpoint")
   public String foo(BearerTokenAuthentication authentication) {
  -    return (String) authentication.getTokenAttributes("sub");
  +    return (String) authentication.getTokenAttributes().get("sub");
   }
   ----
   
  
positive.code: Jwt jwt = Jwt.withTokenValue("token")
      .header("alg", "none")
      .claim("sub", "user")
      .claim("scope", "read");
  
  mvc
      .perform(get("/endpoint")
  
negative.code: assertThat(jwt.getTokenValue()).isEqualTo("token");
  assertThat(jwt.getHeaders().get("alg")).isEqualTo("none");
  assertThat(jwt.getSubject()).isEqualTo("sub");
  ----
  
  These values can, of course be configured.
  