How to know if JWT authentication happens before or after envoy filter?

1

Hi,

I want to execute some Lua script for every request and then pass the request to the JWT authentication filter.

I tried to list the proxy listeners with:

istioctl proxy-config listeners pod/istio-ingressgateway-c585f5b55-aaaaa --port 8080 -o yaml

However, I could not figure out which one of the filters is for JWT authentication.

Does the JWT authentication process belong to the filters? How can I configure my filters to be executed before or after JWT authentication?

Thanks