Fix validation of audience claim

lcobucci · lcobucci · commit a64bafdd20fa · 2020-11-27T01:56:50.000+01:00
diff --git a/src/Token.php b/src/Token.php
@@ -308,7 +308,7 @@ public function isExpired(DateTimeInterface $now = null)
      */
     public function isPermittedFor($audience)
     {
-        return $this->claims->get(RegisteredClaims::AUDIENCE) === $audience;
+        return in_array($audience, $this->claims->get(RegisteredClaims::AUDIENCE, []), true);
     }
 
     /**

Original file line number	Diff line number	Diff line change
`@@ -308,7 +308,7 @@ public function isExpired(DateTimeInterface $now = null)`
`308`	`308`	`*/`
`309`	`309`	`public function isPermittedFor($audience)`
`310`	`310`	`{`
`311`		`- return $this->claims->get(RegisteredClaims::AUDIENCE) === $audience;`
	`311`	`+ return in_array($audience, $this->claims->get(RegisteredClaims::AUDIENCE, []), true);`
`312`	`312`	`}`
`313`	`313`
`314`	`314`	`/**`