For the identity propagation, used a signed JWT to carry the credential downstream

When an endpoint is protected by OAuth, there is a need to propagate information to downstream traffic..

Ideally with a signed JWT, with the following claim..
sub : resource owner
tid : transaction id
client_id : [optional] application Id/client_id
scope : [optional]

Start by tracing the OAuth-protected endpoint and downstream traffic path in the gateway; the issue names no files or tests. Establish how the listed JWT claims should be propagated and validated, then verify the behavior with coverage for downstream requests.

Written by the indexing model from the issue text.