Any valid JWT token created works for ALL/ANY consumers, not getting filtered by the respective consumer for which the JWT was created. is this by design or a bug?
I’m using ACL to restrict consumers to specific groups and JWT created for a specific consumer, but kong allowed me to use a valid JWT created with the secret and key generated for a different consumer.