suppor JWT "crit" claim
use "tid" parameter for ticket ID