docs: protected String getJwtId(final TicketGrantingTicket tgt) {
          val oAuthCallbackUrl = getConfigurationContext().getCasProperties().getServer().getPrefix()
              + OAuth20Constants.BASE_OAUTH20_URL + '/'
              + OAuth20Constants.CALLBACK_AUTHORIZE_URL_DEFINITION;
  
          val oAuthServiceTicket = Stream.concat(
              tgt.getServices().entrySet().stream(),
              tgt.getProxyGrantingTickets().entrySet().stream())
              .filter(e -> {
                  val service = getConfigurationContext().getServicesManager().findServiceBy(e.getValue());
                  return service != null && service.getServiceId().equals(oAuthCallbackUrl);
              })
              .findFirst();
          if (oAuthServiceTicket.isEmpty()) {
              LOGGER.trace("Cannot find ticket issued to [{}] as part of the authentication context", oAuthCallbackUrl);
              return tgt.getId();
          }
          return oAuthServiceTicket.get().getKey();
      }