class ShiroJwtVerifyingFilter extends AccessControlFilter {

  @Override
  protected boolean isAccessAllowed(ServletRequest req, ServletResponse res, Object mappedValue) throws Exception {
    Subject nonJwt = getSubject(req, res);

    return null != nonJwt.getPrincipal() && (nonJwt.isRemembered() || nonJwt.isAuthenticated())
      ? true
      : getJwtUser(req).isPresent();
  }

  public  ShiroJwtVerifyingFilter();

}