Title: Support authorized and unauthorized in an api

Description:

When I work, i see an issued but envoy doesn't support. This is my context: When i call an api through gateway if i disabled true authorized so i ignore verify token, but i pass token into header and i want to verify in this case, how to handle it but not necessary using middleware in my project

[optional Relevant Links:]

Any extra documentation required to understand the issue.