I've studied a couple of JWT auth plugins and notice the current user is being set in either the rest_api_init acti