Thrown when a JWT has expired. Maps to HTTP 401.
A catch-all exception for JWT verification failures.
Thrown when a request requires authentication but no JWT is present. Maps to HTTP 401.