Accessing the jwt token on the server

[timbicker]

Hi,
I am not sure whether this is a bug or not.
For jwt-based sessions we have the two callbacks jwt and session. As far as I know, the callback jwt is used to store data in a http-only cookie in the browser which cannot be accessed from javascript on the client. Therefore we have the session callback which is used to provide information to the client.

If we use the auth function on the server it returns the session. But shouldn't it instead return the jwt? Because the session is always a subset of the jwt. If that's intended, how can I access the jwt on the server?