1. Homepage
  2. Release Notes

  3. JWT Validation

JWT Validation

The JWT Validation policy validates a JWT.

For configuration details, see JWT Validation Policy.

September 2, 2026

What’s New

  • You can now enable OAuth 2.0 Protected Resource Metadata (RFC 9728) in the JWT Validation policy. When enabled, the policy serves a protected resource metadata document at {API_Path}/.well-known/oauth-protected-resource and includes a resource_metadata hint in 401 responses, so that clients can discover the authorization server that protects the API. Enable this feature with the new enableProtectedResourceMetadata parameter and specify the authorization server to advertise with the new protectedResourceMetadataAuthorizationServerUrl parameter. For configuration details, see JWT Validation Policy.

  • JWT Validation policy implementation version 0.12.0 is now supported by Omni Gateway.

  • JWT Validation policy definition version 0.12.0 is now supported by Omni Gateway.