The documentation for the aforementioned filters incorrectly states that the JWT/id_token to be validated needs to be supplied as a config expression, and suggests in the examples that the value should be statically configured in the route, while, actually, the idToken }}and {{jwt properties support runtime expressions, so that values can be picked up from the request as one would expect.