When request-level authentication fails, it would be more convenient to redirect user to proper error pages for the following errors.
Something like:
RBAC: access denied: "Sorry, your request cannot be authenticated. You need a valid JWT token."jwt authentication failed: "The token embedded in your request is not valid. This security incident will be reported."
It should be possible to implement these redirections using Istio Envoy Filter, see: https://niravshah2705.medium.com/redirect-from-istio-e2553afc4a29.
When request-level authentication fails, it would be more convenient to redirect user to proper error pages for the following errors.
Something like:
RBAC: access denied: "Sorry, your request cannot be authenticated. You need a valid JWT token."jwt authentication failed: "The token embedded in your request is not valid. This security incident will be reported."It should be possible to implement these redirections using Istio Envoy Filter, see: https://niravshah2705.medium.com/redirect-from-istio-e2553afc4a29.