anchor.diff:  }
   ```
   
  +### The `Claims` Enumeration Utility Class
  +
  +The `org.eclipse.microprofile.jwt.Claims` utility class encapsulate an enumeration
  +of all the standard JWT related claims along with a description and the required
  +Java type for the claim as returned from the `JsonWebToken#getClaim(String)`
  +method.
  +
  +```java
  +public enum Claims {
  +    // The base set of required claims that MUST have non-null values in the JsonWebToken
  +    iss("Issuer", String.class),
  +    sub("Subject", String.class),
  +    aud("Audience", Set.class),
  +    exp("Expiration Time", Long.class),
  +    iat("Issued At Time", Long.class),
  +    jti("JWT ID", String.class),
  +    upn("MP-JWT specific unique principal name", String.class),
  +    groups("MP-JWT specific groups permission grant", Set.class),
  +    raw_token("MP-JWT specific original bearer token", String.class),
  +
  +    // The IANA registered, but MP-JWT optional claims
  +    nbf("Not Before", Long.class),
  +    auth_time("Time when the authentication occurred", Long.class),
  +    updated_at("Time the information was last updated", Long.class),
  +    azp("Authorized party - the party to which the ID Token was issued", String.class),
  +    nonce("Value used to associate a Client session with an ID Token", String.class),
  +    at_hash("Access Token hash value", Long.class),
  +    c_hash("Code hash value", Long.class),
  +
  +    full_name("Full name", String.class),
  +    family_name("Surname(s) or last name(s)", String.class),
  +    middle_name("Middle name(s)", String.class),
  +    nickname("Casual name", String.class),
  +    given_name("Given name(s) or first name(s)", String.class),
  +    preferred_username("Shorthand name by which the End-User wishes to be referred to", String.class),
  +    email("Preferred e-mail address", String.class),
  +    email_verified("True if the e-mail address has been verified; otherwise false", Boolean.class),
  +
  +    gender("Gender", String.class),
  +    birthdate("Birthday", String.class),
  +    zoneinfo("Time zone", String.class),
  +    locale("Locale", String.class),
  +    phone_number("Preferred telephone number", String.class),
  +    phone_number_verified("True if the phone number has been verified; otherwise false", Boolean.class),
  +    address("Preferred postal address", JsonObject.class),
  +    acr("Authentication Context Class Reference", String.class),
  +    amr("Authentication Methods References", String.class),
  +    sub_jwk("Public key used to check the signature of an ID Token", JsonObject.class),
  +    cnf("Confirmation", String.class),
  +    sip_from_tag("SIP From tag header field parameter value", String.class),
  +    sip_date("SIP Date header field value", String.class),
  +    sip_callid("SIP Call-Id header field value", String.class),
  +    sip_cseq_num("SIP CSeq numeric header field parameter value", String.class),
  +    sip_via_branch("SIP Via branch header field parameter value", String.class),
  +    orig("Originating Identity String", String.class),
  +    dest("Destination Identity String", String.class),
  +    mky("Media Key Fingerprint String", String.class),
  +
  +    jwk("JSON Web Key Representing Public Key", JsonObject.class),
  +    jwe("Encrypted JSON Web Key", String.class),
  +    kid("Key identifier", String.class),
  +    jku("JWK Set URL", String.class),
  +
  +    UNKNOWN("A catch all for any unknown claim", Object.class)
  +    ;
  +...
  +    /**
  +     * @return A desccription for the claim
  +     */
  +    public String getDescription() {
  +        return description;
  +    }
  +
  +    /**
  +     * The required type of the claim
  +     * @return type of the claim
  +     */
  +    public Class<?> getType() {
  +        return type;
  +    }
  +}
  +```
  +
   ### Service Specific Authorization Claims
  -An extended form of authorization on a per service basis using a "resource_access" claim has been postponed to a future
  -release. See <<resource_access,Future Directions>> for more information.
  +An extended form of authorization on a per service basis using a "resource_access"
  +claim has been postponed to a future release. See <<resource_access,Future Directions>>
  +for more information.
  +
  +## Marking a JAX-RS Application as Requiring MP-JWT Access Control
  +Since the MicroProfile does not specify a deployment format, and currently does
  +not rely on servlet metadata descriptors, we have added an `org.eclipse.microprofile.jwt.LoginConfig`
  +annotation that provides the same information as the web.xml login-config
  +element. It's intended usage is to mark a JAX-RS `Application` as requiring
  +MicroProfile JWT RBAC as shown in the following sample:
  +
  +```java
  +import org.eclipse.microprofile.annotation.LoginConfig;
  +
  +import javax.ws.rs.ApplicationPath;
  +import javax.ws.rs.core.Application;
  +
  +@LoginConfig(authMethod = "MP-JWT", realmName = "TCK-MP-JWT")
  +@ApplicationPath("/")
  +public class TCKApplication extends Application {
  +}
  +```
  +
  +The MicroProfile JWT implementation is responsible for either directly processing
  +this annotation, or mapping it to an equivalent form of metadata for the
  +underlying implementation container.
   
   ## Mapping MP-JWT Tokens to Java EE Container APIs
   
  -The requirements of how a JWT should be exposed via the various Java EE container APIs is discussed in this section.
  -For the 1.0 release, the only manadatory container integration is with the JAX-RS container, and injection of
  -the MP-JWT types.
  +The requirements of how a JWT should be exposed via the various Java EE container
  +APIs is discussed in this section. For the 1.0 release, the only mandatory container
  +integration is with the JAX-RS container, and injection of the MP-JWT types.
   
   ### CDI Injection Requirements
   
  -#### Injection of JsonWebToken
  -An MP-JWT implementation must support the injection of the currently authenticated caller as a JsonWebToken with
  -@RequestScoped:
  +#### Injection of `JsonWebToken`
  +An MP-JWT implementation must support the injection of the currently authenticated
  +caller as a JsonWebToken with @RequestScoped:
   
   ```java
   @Path("/endp")
  
positive.code: 
      /**
       * Verify is a given claim exists
       * @param claimName
       * @return
       */
      default boolean containsClaim(String claimName) {
          return claim(claimName).isPresent();
  
negative.code:     String getName();
  
      /**
       * Get the raw bearer token string originally passed in the authentication
       * header
       * @return raw bear token string
       */
      default String getRawToken() {
  