Does JwtAuth support the "aud" claim?

[geospatialweb]

When I include the JWT Claim, 'aud' I receive a FORBIDDEN error. It is my understanding that this specific claim is often mandatory and requires supplemental verification . Any thoughts?

[chrislearn]

salvo use jsonwebtoken which supports aud.

[geospatialweb]

This is what I came up with that eliminates the 403 FORBIDDEN error for the JWT aud claim:

pub fn handle_jwt_auth(audience: &str, secret: &[u8]) -> JwtAuth<JwtClaims, ConstDecoder> {
    // eg. audience = JWT_AUDIENCE=aud0,aud1 -> &env.jwt_audience -> "aud0,aud1"
    let aud: Vec<String> = audience
        .split(',')
        .map(String::from)
        .collect();
    let mut validation = Validation::default();
    validation.set_audience(&[&aud[0], &aud[1]]);
    JwtAuth::new(ConstDecoder::with_validation(
        DecodingKey::from_secret(secret),
        validation,
    ))
        .finders(vec![Box::new(HeaderFinder::new())])
        .force_passed(true)
}