We only check for JWT when it's actually expected -> if absent, throw error
We only check for JWT when it's actually expected -> if absent, throw error

OpenCollective/opencollective-api,OpenCollective/opencollective-api,OpenCollective/opencollective-api