View Source PrimaAuth0Ex.Absinthe.CreateSecurityContext (prima_auth0_ex v0.6.3)

Plug that reads the permissions from the JWT passed in the Authorization header and stores them in the Absinthe context, so that they can be accessed by the PrimaAuth0Ex.Absinthe.RequirePermissions middleware.

It does not validate the token! You should use the PrimaAuth0Ex.Plug.VerifyAndValidateToken plug to do that.