ed by another more permissive <code>ALLOW</code> policy. This works because the <code>DENY</code> policy takes precedence over the
<code>ALLOW</code> policy and could deny a request early before <code>ALLOW</code> policies.</p><p>Use the following policy to enforce mandatory JWT validation in addition to the <a href=/v1.19/docs/tasks/security/authentication/authn-policy/#end-user-authentication>request authentication</a> policy.
The policy denies the request if the request principal is empty. The request pr