ESS_PORT/headers&#34;
HTTP/1.1 404 Not Found
...
</code></pre><p>You can also create the authorization policy to explicitly reject the request with HTTP code 403 when JWT is missing.</p></li><li><p>Validate the ingress gateway returns the HTTP code 401 with invalid JWT:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ curl -s -I &#34;http://$INGRESS_HOST:$INGRESS_PORT/headers&#34; -H &#34;Authorization: Bearer some.invalid.token&#34;
HTTP/1.1 401 Unauthorized
...
</code></pre><p>The