krishnakumar797
krishnakumar797
What i need is to verify the values from the request header and compare it with the token claims. Also would it be possible to decode the JWT token claim...
But CUSTOM type is still in Alpha stage and Istio recommends the Alpha features are not recommended to be used in Production, please advice.
As a work around we implemented EnvoyFilter with lua scripts applied as HTTP_FILTER in SIDECAR_INBOUND context.
Can we control traffic to the pods using ServerAuthorization Policy based on JWT token claims. This will be similar to the AuthorizationPolicy in Istio.