Accept unknown audiences beyond the client ID (#379)

Author: rssc

README.md

@@ -63,7 +63,7 @@ services:
         #    default: true                                See https://github.com/MarcelCoding/jitsi-openid/issues/372#issuecomment-2730510228
         # - 'SKIP_PREJOIN_SCREEN=false'              # <- skips the jitsi prejoin screen after login (default: true)
         # - 'GROUP=example'                          # <- Value for the 'group' field in the token
-      #    default: ''
+        #    default: ''
     ports:
       - "3000:3000"
 # ...

src/routes.rs

@@ -192,8 +192,11 @@ fn id_token_claims(
     }
   };
 
+  let id_token_verifier = client
+    .id_token_verifier()
+    .set_other_audience_verifier_fn(|_aud| true);
   let claims = id_token
-    .claims(&client.id_token_verifier(), nonce)
+    .claims(&id_token_verifier, nonce)
     .map_err(InvalidIdTokenNonce)?;
 
   if let Some(acr_values) = &config.acr_values {