diff --git a/src/lib/jwtVerifier.ts b/src/lib/jwtVerifier.ts index 2bfa94678..308370807 100644 --- a/src/lib/jwtVerifier.ts +++ b/src/lib/jwtVerifier.ts @@ -2,9 +2,9 @@ import { JwtRsaVerifier } from "aws-jwt-verify"; export const verifier = JwtRsaVerifier.create({ - issuer: process.env.COGNITO_ISSUER, // set this to the expected "iss" claim on your JWTs - audience:null, // set this to the expected "aud" claim on your JWTs - jwksUri: process.env.COGNITO_JWKS_URI, // set this to the JWKS uri from your OpenID configuration + issuer: process.env.COGNITO_ISSUER, + audience: process.env.COGNITO_CLIENT_ID, + jwksUri: process.env.COGNITO_JWKS_URI });