For several years, Apigee has included builtin policies that generate and verify signed JWT and JWS. As of June 2022, the built-in policies do not yet handle JWS with non-base64url encoded payloads ...