fix audience validation in develop

Author: tpurschke

roles/lib/files/FWO.Middleware.Client/JwtReader.cs

@@ -60,16 +60,16 @@ public async Task<bool> Validate()
 			try
 			{
 				TokenValidationParameters validationParameters = new TokenValidationParameters
-				{
+					{
 					RequireExpirationTime = true,
 					RequireSignedTokens = true,
+					ValidateLifetime = true,
 					ValidateAudience = true,
+                    ValidAudiences = [FWO.Basics.JwtConstants.Audience],
 					ValidateIssuer = true,
-					ValidateLifetime = true,
-					ValidAudience = FWO.Basics.JwtConstants.Audience,
 					ValidIssuer = FWO.Basics.JwtConstants.Issuer,
 					IssuerSigningKey = jwtPublicKey,
-					
+
 				};
 
 				JsonWebTokenHandler handler = new ();

roles/middleware/files/FWO.Middleware.Server/Program.cs

@@ -128,7 +128,9 @@ await Task.Factory.StartNew(async() =>
         RequireExpirationTime = true,
         RequireSignedTokens = true,
         ValidateAudience = true,
-        ValidateIssuer = false,
+        ValidAudiences = [FWO.Basics.JwtConstants.Audience],
+        ValidateIssuer = true,
+        ValidIssuers = [FWO.Basics.JwtConstants.Issuer],
         ValidateLifetime = true,
         RoleClaimType = "role",
         IssuerSigningKey = ConfigFile.JwtPublicKey