use jsonwebtoken::{Validation, decode};

pub fn validate_token(token: &str) -> bool {
    let mut validation = Validation::default();
    // BAD: Skip audience validation
    validation.validate_aud = false;
    decode(token, &key, &validation).is_ok()
}