    protected Map<String, Serializable> getPrincipal(Jwt jwt) {
        Map<String, Serializable> principal = new HashMap<>();
        principal.put("jwt", (Serializable) jwt.getBody());
        return principal;
    }
The software does not verify, or incorrectly verifies, the cryptographic signature for data.