Merge pull request #189 from kinde-oss/peter/fix/istokenvalid-check-audience

Peter/fix/istokenvalid check audience

Author: peterphanouvong

playground/src/middleware.ts

@@ -1,12 +1,9 @@
-import {
-  authMiddleware,
-  withAuth,
-} from "@kinde-oss/kinde-auth-nextjs/middleware";
+import {withAuth} from '@kinde-oss/kinde-auth-nextjs/middleware';
 
 export default function middleware(req: Request) {
   return withAuth(req);
 }
 
 export const config = {
-  matcher: ["/dashboard"],
+  matcher: ['/dashboard']
 };

src/config/index.js

@@ -69,7 +69,7 @@ export const config = {
   clientID: KINDE_CLIENT_ID,
   clientSecret: KINDE_CLIENT_SECRET,
   postLogoutRedirectURL: KINDE_POST_LOGOUT_REDIRECT_URL,
-  audience: KINDE_AUDIENCE,
+  audience: KINDE_AUDIENCE ? KINDE_AUDIENCE.split(' ') : '',
   cookieDomain: KINDE_COOKIE_DOMAIN,
   responseType: 'code',
   codeChallengeMethod: 'S256',

src/utils/pageRouter/isTokenValid.js

@@ -11,7 +11,7 @@ const isTokenValid = (token) => {
   if (config.audience)
     isAudienceValid =
       accessTokenPayload.aud &&
-      accessTokenPayload.aud.includes(config.audience);
+      accessTokenPayload.aud.includes(...config.audience);
 
   if (
     accessTokenPayload.iss == config.issuerURL &&

types.d.ts

@@ -12,6 +12,7 @@ import {
 export type KindeAccessToken = {
   aud: string[];
   azp: number;
+  exp: number;
   iat: number;
   iss: string;
   jti: string;