Skip to main content

OIDC_AUDIENCE

Constant OIDC_AUDIENCE 

Source
pub const OIDC_AUDIENCE: Config<fn() -> Value>;
Expand description

OIDC audience (client IDs). When empty, audience validation is skipped. Validates that the JWT’s aud claim contains at least one of these values. It is insecure to skip validation because it is the only mechanism preventing attackers from authenticating using a JWT issued by a dummy application, but from the same identity provider.