 401 is returned by the request authentication because the JWT failed the validation.</p></li><li><p>Validate the ingress gateway routes the request with a valid JWT token that includes the claim <code>groups: group1</code>:</p><pre><code class=language-bash data-expandlinks=false data-repo=istio>$ TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/groups-scope.jwt -s) &amp;&amp; echo &#34;$TOKEN_GROUP&#34; | cut -d &#39;.&#39; -f2 - | base64 --decode
{&