Function token_sub 

pub(crate) fn token_sub(token: &str) -> String

The sub claim of a Cognito token (unverified decode: this names the account a token we already hold belongs to, it doesn’t authenticate it). Empty if the token isn’t a JWT or has no sub.