title: Istio policy to deny expired JWT access tokens
body: <p>How can I define an Istio policy for my service to deny any request with a JWT access token that is expired?</p>
  <p>For context, I have a Spring Boot KNative service with <a href="https://istio.io/latest/docs/reference/config/security/request_authentication/" rel="nofollow noreferrer">RequestAuthentication</a> config that has checks for the token issuer.</p>