The documentation variously says the claims in a JWT are accessible via "#var.claimSet" and also "#authentication.properties.claims". Which is correct, and what's the difference? I can only seem to get authentication.properties.claims to work, where my claim is a list and I use a claim expression such as "#authentication.properties.claims.groups contains 'GroupA'".
