is the token a JWT? like how does your system diff...
# spicedb
y
is the token a JWT? like how does your system differentiate between a user caller and an API caller?