JWT bound constraint check in auth/<role>/config does not consider bound_claims

[shwuandwing]

Hi,

For configuring JWT roles (in path_role.go line 401), there is a check that is at least one bound constraint. However, that check does not consider if bound_claims is non-empty.

i.e. trying to create a role fails if audience / subject / cidr is empty, but bound_claims is non-empty.

vault-plugin-auth-jwt/path_role.go

Line 401 in eb2915c

if roleType != "oidc" {

If you agree this is a valid issue, I could make a diff to fix it.

[kalafut]

Hi. I think that is a reasonable improvement.

[shwuandwing]

#49

[shwuandwing]

Fix merged.