User roles from token
List<String> get tokenRoles { final rolesClaim = identity.jwt.getClaim<List<dynamic>>(AuthClaims.roles); if (rolesClaim is List) { return List<String>.from(rolesClaim); } return <String>[]; }