core/modules/monkeycloudutils/public/Test-IsValidAudience.ps1

# Monkey365 - the PowerShell Cloud Security Tool for Azure and Microsoft 365 (copyright 2022) by Juan Garrido
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

Function Test-IsValidAudience{
    <#
        .SYNOPSIS
 
        .DESCRIPTION
 
        .INPUTS
 
        .OUTPUTS
 
        .EXAMPLE
 
        .NOTES
            Author : Juan Garrido
            Twitter : @tr1ana
            File Name : Test-IsValidAudience
            Version : 1.0
 
        .LINK
            https://github.com/silverhack/monkey365
    #>


    [cmdletbinding()]
    param(
        [Parameter(Mandatory=$true)]
        [string]$token,

        [Parameter(Mandatory=$true)]
        [string]$audience
    )
    try{
        [System.Uri]$token_aud = Read-JWTtoken -token $token | Select-Object -ExpandProperty aud
        return ($token_aud.Authority -match $audience)
    }
    catch{
        Write-Warning $_.Exception
    }
}