You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In this case, the validation should fail when expecting a zero-length string array audience claim value; but not with a NullPointerException as it is currently. We'll get a fix in to throw an IncorrectClaimException instead.
Checklist
Description
We've encountered a bug in 4.4.0 when checking if the token is issued for audience that in some cases may be empty. It used to work with 3.19.4.
Here's a snippet to reproduce it.
The workaround we've found is to exclude
withAudience
check in case if audience is empty.Reproduction
Additional context
No response
java-jwt version
4.4.0
Java version
11
The text was updated successfully, but these errors were encountered: