ong> <code>RequestAuthentication</code> and <code>AuthorizationPolicy</code> for JWT validation.</p><div><aside class="callout warning"><div class=type><svg class="large-icon"><use xlink:href="/v1.18/img/icons.svg#callout-warning"/></svg></div><div class=content>Please note that <code>RequestAuthentication</code> is used to define a list of issuers that should be accepted. It does not reject
a request without JWT token.</div></aside></div><p>For Istio, this vulnerability only exists if your service:</p><ul>