Identity token verification should be possible without providing client instance. The client requires OAuth service credentials that are unnecessary when already acquired identity token needs to be verified.
Looks like the client is necessary only to verify the aud value. This value could be passed as an argument.
Identity token verification should be possible without providing
client
instance. Theclient
requires OAuth service credentials that are unnecessary when already acquired identity token needs to be verified.Looks like the
client
is necessary only to verify theaud
value. This value could be passed as an argument.