API Manager allows request to go thru even with a JWT that has invalid signature

[thanhdat21293]

Description

API Manager allows request to go thru even with a JWT that has invalid signature.
Access Token: base64(header).base64(payload).base64(signature)

Eg:

• Valid Access Token: abc.def.ghj
• Invalid Access Token: abc.def.ghjk

Both can Invoke the API and the request still goes thru.

How can I fix it?

Thanks!

Affected Component

APIM

Version

4.1.0

Environment Details (with versions)

OS: Windows 10

Related Issues

No response

Suggested Labels

No response