No JWT validation

[mims92]

I didn't find any JWT token validation. In the Receive.php file:

$idToken = $accessToken->getValues()['id_token'];
$decodedAccessTokenPayload = base64_decode(
    explode('.', $idToken)[1]
);

Isn't it a security risk to not validate the JWT signature?