The gate validates the token.
The app just trusts the header.
This app sits behind an Application Gateway listener enforcing Entra JWT validation at the edge. Sign in, then ask the Gate Explainer to prove it — or break it on purpose in the playground.
Sign in to check the gate
x-msft-entra-identity: —
Sign in with your Entra ID account to unlock the Gate Explainer, the token
playground and the live gate feed.