oauth_jwt.rb in rodauth-oauth-0.10.4

- old
+ new

@@ -239,9 +239,19 @@
 
     def oauth_token_by_token(token)
       jwt_decode(token)
     end
 
+    def token_from_application?(grant_or_claims, oauth_application)
+      return super if grant_or_claims[oauth_tokens_id_column]
+
+      if grant_or_claims["client_id"]
+        grant_or_claims["client_id"] == oauth_application[oauth_applications_client_id_column]
+      else
+        Array(grant_or_claims["aud"]).include?(oauth_application[oauth_applications_client_id_column])
+      end
+    end
+
     def json_token_introspect_payload(oauth_token)
       return { active: false } unless oauth_token
 
       return super unless oauth_token["sub"] # naive check on whether it's a jwt token
 