throw an error when audience is used without oidcConformant flag

auth0 · Mar 24, 2017 · fba470f · fba470f
1 parent 52f6c4a
commit fba470f
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/core/index.js b/src/core/index.js
@@ -249,7 +249,11 @@ function extractAuthOptions(options) {
   }
 
   if (oidcConformant && !redirect && responseType.indexOf('id_token') > -1) {
-    throw new Error("It is not posible to request an 'id_token' while using popup mode.");
+    throw new Error("It is not possible to request an 'id_token' while using popup mode.");
+  }
+
+  if (!oidcConformant && audience) {
+    throw new Error("It is not possible to use the `auth.audience` option when the `oidcConformant` flag is set to false");
   }
 
   // for legacy flow, the scope should default to openid