fix(jsonwebtoken): disable audience validation if it was not passed in options (#910)

pasha-vuiko · web-flow · commit ec14da02c7cf · 2024-10-24T12:01:31.000+08:00
diff --git a/packages/jsonwebtoken/src/validation.rs b/packages/jsonwebtoken/src/validation.rs
@@ -61,6 +61,8 @@ impl From<&Validation> for jsonwebtoken::Validation {
 
     if let Some(aud) = &value.aud {
       validation.set_audience(aud);
+    } else {
+      validation.validate_aud = false;
     }
     if let Some(required_spec_claims) = &value.required_spec_claims {
       validation.set_required_spec_claims(required_spec_claims);

Original file line number	Diff line number	Diff line change
`@@ -61,6 +61,8 @@ impl From<&Validation> for jsonwebtoken::Validation {`
`61`	`61`
`62`	`62`	`if let Some(aud) = &value.aud {`
`63`	`63`	`validation.set_audience(aud);`
	`64`	`+ } else {`
	`65`	`+ validation.validate_aud = false;`
`64`	`66`	`}`
`65`	`67`	`if let Some(required_spec_claims) = &value.required_spec_claims {`
`66`	`68`	`validation.set_required_spec_claims(required_spec_claims);`