sadika·5 anni fa·discussIn backend API, validate the JWT token (signature, nbf, exp, etc) to and make sure audience 'aud' field match to your client ID