JWTRule

Examples:

Spec for a JWT that is issued by , with the audience claims must be either bookstore_android.apps.example.com or bookstore_web.apps.example.com. The token should be presented at the Authorization header (default). The Json web key set (JWKS) will be discovered followwing OpenID Connect protocol.

This example specifies token in non-default location (x-goog-iap-jwt-assertion header). It also defines the URI to fetch JWKS explicitly.

JWTHeader

This message specifies a header location to extract JWT token.