I think it makes sense to have the error message on verification failure be configurable.
Right now it returns a 403 with jwtproxy: unable to verify request: No JWT found (text/plain). You could always transform the 403 to whatever error response, but then you'd have to inspect the response body to see if it came from jwt or if it came from an upstream service or another proxy
I think it makes sense to have the error message on verification failure be configurable.
Right now it returns a
403withjwtproxy: unable to verify request: No JWT found(text/plain). You could always transform the 403 to whatever error response, but then you'd have to inspect the response body to see if it came from jwt or if it came from an upstream service or another proxy