Receives the full UserIdentityToken so implementations can match by
Thumbprint, X509Subject, UserName, etc., plus an optional resolution context
to enforce application/endpoint restrictions. Registered on
IServerBase.roleResolvers by packages like node-opcua-role-set-server.
Pluggable role resolver (OPC 10000-18 §4.4).
Receives the full UserIdentityToken so implementations can match by Thumbprint, X509Subject, UserName, etc., plus an optional resolution context to enforce application/endpoint restrictions. Registered on IServerBase.roleResolvers by packages like node-opcua-role-set-server.