Announcing the preview of JSON Web Token (JWT) validation in Azure Application Gateway — enabling authentication and token validation right at the Application gateway before traffic reaches your backend applications or APIs.
Why It matters
Protect at the perimeter: Block requests with missing or invalid tokens (401/403) at the edge, ensuring only trusted traffic reaches your services.
Boost performance: Offload token validation from your microservices or web apps to improve scalability and response times.
Simplify operations: Apply consistent authentication policies centrally across multiple applications and routes.
What’s included in the preview
Issuer (iss) validation
Audience (aud) matching - supports Client ID and/or custom App ID URIs
Expiration (exp) enforcement
Signature verification using JWKS
Learn more.