Avoid setting value to passed parameters

auth0 · Nov 29, 2023 · 4fe7374 · 4fe7374
1 parent dd6215e
commit 4fe7374
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/lib/src/main/java/com/auth0/jwt/JWTVerifier.java b/lib/src/main/java/com/auth0/jwt/JWTVerifier.java
@@ -368,10 +368,11 @@ private boolean assertValidAudienceClaim(
                 List<String> expectedAudience,
                 boolean shouldContainAll
         ) {
-            // normalize to lists if null
-            actualAudience = actualAudience == null ? Collections.emptyList() : actualAudience;
-            expectedAudience = expectedAudience == null ? Collections.emptyList() : expectedAudience;
-
+            if(actualAudience == null && expectedAudience == null) {
+                return true;
+            } else if (actualAudience == null || expectedAudience == null) {
+                return false;
+            }
             if (shouldContainAll) {
                 // containsAll([]) always returns true
                 if (expectedAudience.isEmpty() && !actualAudience.isEmpty()) {