Decode JSON Web Token Assertion is failing

Products

• CA API Gateway

Issue/Introduction

Decode JSON Web Token Assertion is failing in our policy without displaying any error message in audit logs. 
Can you please help understanding what is the root cause ? 

Environment

11.0

Resolution

The requestAccessToken contains the entire Authorization header, where as Layer 7 expects ONLY the encoded JWT.

thus Decode JWT fails — without an audit log, and without any visible error.

And you do not see any visble logs because, this Decode JWT is inside a wsp:All block with no failure route and ValidationType=None, so:

• signature is not checked

• audience is not checked

• BUT structural decoding is still enforced

When the assertion fails structurally, policy execution stops that branch but does not log anything.