jwt authentication token

[behdad088]

Hi, I have a question related to authentication in this ApiGateways. In ApiGateways we use jwt token to create token for mobileshoppingagg and webshoppingaggswaggerui and with the help of HttpClientAuthorizationDelegatingHandler we use the same token to call Order API. My question here is that how does a token that was created with Audience mobileshoppingagg or webshoppingaggswaggerui works for the order api?
Is there another setting that I am missing?

[PeterSHL]

If you have a look at CommonExtensions.cs you can see that options.TokenValidationParameters.ValidateAudience is set to false.
It looks like the Order API doesn't validate the audience.