JWT assertion and filter patterns