diff --git a/src/EventSubscriber/JwtEventSubscriber.php b/src/EventSubscriber/JwtEventSubscriber.php index ad439068e..47dd9c32c 100644 --- a/src/EventSubscriber/JwtEventSubscriber.php +++ b/src/EventSubscriber/JwtEventSubscriber.php @@ -116,6 +116,7 @@ public function validate(JwtAuthValidateEvent $event) { if (!in_array(static::AUDIENCE, $token->getClaim('aud'), TRUE)) { $event->invalidate('Missing audience entry.'); + return; } $uid = $token->getClaim('webid');