roles property

List<String>? roles

Every role the member holds.

null (not an empty list) when the token carries no roles claim, which is what an older AuthOwl token looks like. Role checks then fall back to the primary role rather than reporting no role held.

Implementation

final List<String>? roles;