How to make policy fail when bad jwt token value is given to io.jwt.decode_verify ?

[DamienDelporte]

I managed to make it work with a valid JWT token value 👌

But when not giving a valid JWT token like "not.a.jwt" to io.jwt.decode_verify() I don't have any idea how to make a denial :/
https://play.openpolicyagent.org/p/gZ8hF22hIF

Thank you for your suggestions 🙏

[anderseknert]

You could add another deny rule for that case:

deny["provided token not a JWT"] {
    not io.jwt.decode(input.message)
}

[DamienDelporte]

Awesome, that was it ! Thank you so much !