fixup bearer auth

Authorization/PermissionHandler.cs

@@ -37,7 +37,8 @@ public partial class PermissionHandler : AuthorizationHandler<PermissionRequirem
         }
         else
         {
-            var sub = context.User.FindFirst("sub")?.Value;
+            Console.WriteLine(string.Join(',', context.User.Claims.Select(c => $"{c.Type}: {c.Value}")));
+            var sub = context.User.FindFirst(ClaimTypes.NameIdentifier)?.Value;
             if (sub == null)
                 return;