cxf
cxf copied to clipboard
[CXF-7696] Validate audience restriction using wildcard
Implemented using wildcard with explicit match to take precendence
The patch doesn't apply with the latest master code. I think it would be better to introduce a new configuration variable to support wildcard matching, rather than re-using JwtConstants.EXPECTED_CLAIM_AUDIENCE.