Replying to:

@mackuba.eu Basically it’s meant to give you a DID of the user requesting the feed extracted from the JWT token, it can be either just extracted from the base64/JSON (but it could easily be faked), or it can be verified cryptographically (but that requires doing a network request so not always makes sense)

Kuba Suder @mackuba