d><td><code>key: source.principal</code><br><code>values: ["cluster.local/ns/default/sa/productpage"]</code></td></tr><tr><td><code>request.auth.principal</code></td><td>The principal of the authenticated JWT token, constructed from the JWT claims in the format of <code>&lt;iss>/&lt;sub></code>, requires request authentication policy applied</td><td>HTTP only</td><td><code>key: request.auth.principal</code><br><code>values: ["issuer.example.com/subject-admin"]</code></td></tr><tr><td><code>request.auth.audi