Disable claim validation if no expected values given

jwt · Sep 20, 2024 · b47507a · b47507a
1 parent 9c07581
commit b47507a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/jwt/claims.rb b/lib/jwt/claims.rb
@@ -17,10 +17,10 @@ module Claims
     VERIFIERS = {
       verify_expiration: ->(options) { Claims::Expiration.new(leeway: options[:exp_leeway] || options[:leeway]) },
       verify_not_before: ->(options) { Claims::NotBefore.new(leeway: options[:nbf_leeway] || options[:leeway]) },
-      verify_iss: ->(options) { Claims::Issuer.new(issuers: options[:iss]) },
+      verify_iss: ->(options) { options[:iss] && Claims::Issuer.new(issuers: options[:iss]) },
       verify_iat: ->(*) { Claims::IssuedAt.new },
       verify_jti: ->(options) { Claims::JwtId.new(validator: options[:verify_jti]) },
-      verify_aud: ->(options) { Claims::Audience.new(expected_audience: options[:aud]) },
+      verify_aud: ->(options) { options[:aud] && Claims::Audience.new(expected_audience: options[:aud]) },
       verify_sub: ->(options) { options[:sub] && Claims::Subject.new(expected_subject: options[:sub]) },
       required_claims: ->(options) { Claims::Required.new(required_claims: options[:required_claims]) }
     }.freeze