What's Changed
Note for TypeScript users
The trusted option is now typed as (request, decodedToken) => boolean | Promise<boolean>. Its return value has never been used as request.user (since #278), so if you were returning an object, return a boolean instead (e.g. Boolean(record)) and use formatUser to shape the claims exposed on request.user. No runtime change.
Full Changelog: v10.2.5...v10.2.6