JwtValidator issuer and audience check ignoring does not work ------------------------------------------------------------- Key: ELY-1507 URL: https://issues.jboss.org/browse/ELY-1507 Project: WildFly Elytron Issue Type: Bug Components: Authentication Mechanisms Reporter: Martin Mazanek Assignee: Martin Mazanek https://tools.ietf.org/html/rfc7519 JwtValidator implements iss clam as optional, samy way as stated in RFC7519. The validator is supposed to ignore iss check if its issuers set was empty, however even though it logs that issuer check is ignored it still checks it and rejects all tokens that do not contain iss claim.