@Kevinja Thanks for the feedback.

1. Yes. Since all the requests are going through the Istio Ingress Gateway, the JWT verification is happening there as well.

2. It's a bit tough to debug from limited information 😅. If you could give me a bit more information, I could try my best to help. I wrote this quite a while back. So the concepts are a bit rusty. 🫢