null checks instead of mutating args

auth0 · Nov 29, 2023 · 8fd8ca0 · 8fd8ca0
1 parent dd6215e
commit 8fd8ca0
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/lib/src/main/java/com/auth0/jwt/JWTVerifier.java b/lib/src/main/java/com/auth0/jwt/JWTVerifier.java
@@ -368,9 +368,11 @@ private boolean assertValidAudienceClaim(
                 List<String> expectedAudience,
                 boolean shouldContainAll
         ) {
-            // normalize to lists if null
-            actualAudience = actualAudience == null ? Collections.emptyList() : actualAudience;
-            expectedAudience = expectedAudience == null ? Collections.emptyList() : expectedAudience;
+            if (actualAudience == null && expectedAudience == null) {
+                return true;
+            } else if (actualAudience == null || expectedAudience == null) {
+                return false;
+            }
 
             if (shouldContainAll) {
                 // containsAll([]) always returns true