'aud' claim check

[naseer11]

As per AWS Cognito documentation:

"The audience (aud) claim should match the app client ID created in the Amazon Cognito user pool."

The module doesn't seem to verify the 'aud' claim. Am I missing something or is this a bug?

[jclwong]

client_id (access token) === aud (id token) === Client Id (Cognito User Pool)
This library validates the access token (client_id) against Cognito user pool, and not the id token (aud).

[buccfer]

@naseer11 Since issues like this one have been open for so long I created a different library aws-cognito-express.