Merge pull request dherault#1165 from bayoudhi/fix-bug-jwtOptions.audience.audience.filter-is-not-a-function

frozenbonito · web-flow · commit 050148ede7d0 · 2021-02-11T01:18:19.000+09:00
Use .includes within a safe array variable "validAudiences"
diff --git a/src/events/http/createJWTAuthScheme.js b/src/events/http/createJWTAuthScheme.js
@@ -61,7 +61,7 @@ export default function createAuthScheme(jwtOptions) {
           validAudiences.includes(a),
         )
 
-        if (!validAudienceProvided && !jwtOptions.audience.includes(clientId)) {
+        if (!validAudienceProvided && !validAudiences.includes(clientId)) {
           serverlessLog(`JWT Token does not contain correct audience`)
           return Boom.unauthorized(
             'JWT Token does not contain correct audience',

Original file line number	Diff line number	Diff line change
`@@ -61,7 +61,7 @@ export default function createAuthScheme(jwtOptions) {`
`61`	`61`	`validAudiences.includes(a),`
`62`	`62`	`)`
`63`	`63`
`64`		`- if (!validAudienceProvided && !jwtOptions.audience.includes(clientId)) {`
	`64`	`+ if (!validAudienceProvided && !validAudiences.includes(clientId)) {`
`65`	`65`	serverlessLog(`JWT Token does not contain correct audience`)
`66`	`66`	`return Boom.unauthorized(`
`67`	`67`	`'JWT Token does not contain correct audience',`