Return after failing to find the "aud" claim.

discoverygarden · Jun 23, 2021 · 4d16924 · 4d16924
1 parent 11057e9
commit 4d16924
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/EventSubscriber/JwtEventSubscriber.php b/src/EventSubscriber/JwtEventSubscriber.php
@@ -116,6 +116,7 @@ public function validate(JwtAuthValidateEvent $event) {
 
     if (!in_array(static::AUDIENCE, $token->getClaim('aud'), TRUE)) {
       $event->invalidate('Missing audience entry.');
+      return;
     }
 
     $uid = $token->getClaim('webid');