by Jake Dallimore.
I don't think JWT is applicable here since the failure occurs at the auth request endpoint in Moodle (mod/lti/auth.php). At that point in time, there is no JWT yet. See: https://www.imsglobal.org/spec/security/v1p1#step-2-authentication-request