[Backend] backend/src/types/auth.types.ts JWT payload type does not include an issuer or audience claim

[grantfox-oss]

Join our community: https://t.me/+DOylgFv1jyJlNzM0

Why this matters

backend/src/types/auth.types.ts defines the shape of the JWT payload issued by middleware/auth.ts. Without iss/aud claims, a token minted for this API could theoretically be replayed against another service sharing the same signing secret, and there's no defense-in-depth check that a token was actually issued for this API.

Acceptance criteria

• Add iss and aud fields to the payload type and to token issuance
• Verify iss/aud on token verification, rejecting mismatches
• Add a test for a token with a wrong audience being rejected

Files to touch

• backend/src/types/auth.types.ts
• backend/src/middleware/auth.ts

Out of scope

• Rotating the JWT signing secret
• Multi-tenant token scoping

[onajidavid87-web]

@onajidavid87-web has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

I’d love to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @onajidavid87-web to this issue.

[abimbolaalabi]

@abimbolaalabi has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Please assign this to me Thanks!

ℹ️ Repo Maintainers: To accept this application, review their application or assign @abimbolaalabi to this issue.

[martinshub-tech]

@martinshub-tech has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

I'd like to take this issue. I've analyzed the root cause and am confident I can deliver a reliable fix with proper testing

ℹ️ Repo Maintainers: To accept this application, review their application or assign @martinshub-tech to this issue.

[aarogund]

@aarogund has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

I would like to work on this issue. Kindly assign.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @aarogund to this issue.

[Seunfunmi-319509]

@Seunfunmi-319509 has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Kindly assign

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Seunfunmi-319509 to this issue.

[Nife-tanny]

@Nife-tanny has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi I would like to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Nife-tanny to this issue.

[drips-wave]

Congratulations, @abimbolaalabi! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @abimbolaalabi: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊