@otislinker345 I believe the 'verify' is to make sure it is a valid JWT indicates the signature is valid and the payload has not be tampered with. You will need to look at the roles in a valid JWT to determine if a user has that role.