fix(auth): remove trailing slash from audience check to match Auth0 tokens

Author: clintonlunn

src/app/api/mobile/logout/route.ts

@@ -21,7 +21,7 @@ async function verifyAccessToken (request: NextRequest): Promise<boolean> {
   try {
     await jwtVerify(token, JWKS, {
       issuer: issuer + '/',
-      audience: 'https://api.openbeta.io/'
+      audience: 'https://api.openbeta.io'
     })
     return true
   } catch {

src/js/auth/withUserAuth.ts

@@ -41,8 +41,8 @@ export const withUserAuth = (handler: Next13APIHandler): Next13APIHandler => {
         const { payload } = await jwtVerify(token, JWKS, {
           issuer: issuer + '/',
           audience: [
-            'https://api.openbeta.io/', // Access token (web)
-            clientId // ID token (mobile client ID)
+            'https://api.openbeta.io', // Access token (no trailing slash)
+            clientId // ID token
           ]
         })