Validating JWT tokens

To secure endpoints in APIM by applying OIDC and/or OAUth 2.0, we would need to apply a JWT validation policy. JWT (JSON Web Token) is issued by IdP upon a successful authentication. It acts as a proof of a successful authentication and it also provides additional information that can be used to determine whether the client is authorized to access the resource.

In this exercise, we will configure such a policy on our endpoint.