Magebean Logo Magebean
← Back to Baseline

MB-R259

HUMAN VERIFICATION REQUIRED ASVS 10.5.4 ID Token audience (when oauth_oidc is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

The client validates that the ID Token is intended to be used for that client (audience) by checking that the 'aud'claim from the token is equal to the 'client\_id'value for the client.