我想从 Istio Ingress 修改 HTTP 响应代码和正文

我目前为 Istio 编写了以下身份验证清单。

kind: RequestAuthentication
metadata:
 name: "jwt-validation"
 namespace: some-namespace
spec:
 selector:
    matchLabels:
        auth: required
 jwtRules:
 - issuer: "https://you.auth0.com/"
   jwksUri: "https://you.auth0.com/.well-known/jwks.json"
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
 name: jwt-auth-policy
 namespace: some-namespace
spec:
  selector:
    matchLabels:
      auth: required
  action: DENY
  rules:
  - from:
    - source:
        notRequestPrincipals: ["*"]

我正在从浏览器中获取以下响应，但我希望获得 JSON 响应，并且状态码为 403，内容为

{
    "status": "failure",
    "message": "Not Authorised"
}

我已经尝试了以下 Lua 过滤器

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: custom-filter-response-code
  namespace: istio-system
spec:
  workloadSelector:
    labels:
      istio: ingressgateway
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager"
            subFilter:
              name: "envoy.extAuthz"
    patch:
      operation: INSERT_AFTER
      value:
       name: envoy.custom-resp
       typed_config:
          "@type": "type.googleapis.com/envoy.extensions.filters.http.lua.v3.Lua"
          inlineCode: |
            function envoy_on_response(response_handle)
              if response_handle:headers():get(":status") == "401" then
                response_handle:headers():replace(":status", "403")
              else
                local body = response_handle:body()
                local jsonString = tostring(body:getBytes(0, body:length()))
                jsonString = jsonString:gsub("(status|failur)", "(message|Not Authorised)")
                response_handle:body():set(jsonString)
              end

请给我正确的代码片段。