Is there a way in Istio authorization policy condition evaluation to verify scope of OAUTH JWT token

Security
1

I can use claims in the JWT token and use claims matching , however in OAUTH2 standards scope is the correct way to describe if the token is allowed access to a particular resourse.
These are the list of support condition attributes

There is request.auth.claims. However no support for scope
Is there a way to do scope condition evaluation other than using extensions like OPA

2

Actually the condition eval works for scope as well eventhough it is not explicitly documented. Closing this discussion

3

This topic is temporarily closed for at least 1 hour due to a large number of community flags.

4

This topic was automatically opened after 10 days.