Closed
Description
The method ValidateAsync in GoogleJsonWebSignature.cs doesn't seem to check if aud value in the ID token is equal to user's app’s client ID as described in the third step here: https://developers.google.com/identity/protocols/OpenIDConnect#validatinganidtoken.
Maybe the method should receive some sort of audience similar to how Java api's GoogleIdTokenVerifier does or is this intended to be done manually after validation using async method?