JWT without sub claim

Security
1

In AuthorizationPolicy, source.requestPrincipals is of format “iss/sub” claims. In my JWT there is no “sub” claim. How do I authorize my JWT then?

2

Hi @sudhakar890, some fields like request.auth.claims or request.auth.audiences may help https://istio.io/latest/docs/reference/config/security/conditions/.

1 Like