Events to validate JWT never called !

Is /node/1 accessible for the anonymous user?

Indeed it was accessible to anonymous user. I changed it and it's kinda working but it's odd for me that the bearer is not checked prior to the content access permission and besides there is no logging that helps you really understand why it's not accessible.
I have the problem on another project where we have a custom rest route with permission only to authenticate users and it's not working. Maybe it's du to accessCheck on query not there (as now it's mandatory since D10).

Well, you might be right. I thought about it but didn't know how to proceed.

Seems like this is not a bug. You may be interested in this issue to be able to log some info about auth failures:
✨ Create a mechanism to log the decode exception in \Drupal\jwt\Authentication\Provider\JwtAuth::authenticate() Needs review

@pwolanin Make sure to comment on the security issue about why, or the module may be marked unsupported.

https://security.drupal.org/node/180087

Automatically closed - issue fixed for 2 weeks with no activity.