Support "AND" for JWT validation

[asayah]

Version

No response

Is your feature request related to a problem? Please describe.

whether we could make a specific route AND providers together instead of the current behavior which is OR. In other words, certain routes requiring jwt pass validation on both providers if two providers are listed.

Describe the solution you'd like

No response

Describe alternatives you've considered

No response

Additional Context

No response

[sam-heilbron]

The JWT filter supports both requires_any and requires_all: https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/jwt_authn/v3/config.proto#extensions-filters-http-jwt-authn-v3-jwtauthentication

The Edge API currently only configures the requires_any portion of the filter, which behaves as an OR.

@asayah am I correct in understanding that adding support for requires_all will resolve this ask? Also, depending on the complexity of the changes, is the 1.13 beta a reasonable target for this work, or is the feature needed on a particular branch?

[github-actions]

This issue has been marked as stale because of no activity in the last 180 days. It will be closed in the next 180 days unless it is tagged "no stalebot" or other activity occurs.