code: def check_token(self, token, allowed_roles, resource, method):
          
          resource_conf = config.DOMAIN[resource]
          audiences = resource_conf.get('audiences', config.JWT_AUDIENCES)
          return self._perform_verification(token, audiences, allowed_roles)
docs: This function is called when a token is sent throught the access_token
          parameter or the Authorization header as specified in the oAuth 2 specification.
  
          The provided token is validated with the JWT_SECRET defined in the Eve configuration.
          The token issuer (iss claim) must be the one specified by JWT_ISSUER and the audience
          (aud claim) must be one of the value(s) defined by the either the "audiences" resource
          parameter or the global JWT_AUDIENCES configuration.
  
          If JWT_ROLES_CLAIM is defined and a claim by that name is present in the token, roles
          are checked using this claim.
  
          If a JWT_SCOPE_CLAIM is defined and a claim by that name is present in the token, the
          claim value is check, and if "viewer" is present, only GET and HEAD methods will be
          allowed. The scope name is then added to the list of roles with the scope: prefix.
  
          If the validation succeed, the claims are stored and accessible thru the
          get_authen_claims() method.