codeql/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs

using System;
using System.Collections.Generic;
using Microsoft.IdentityModel.Tokens;

namespace JsonWebTokenHandlerTest
{
    public class JsonWebTokenHandler_class01
    {
        public void TestCase01()
        {
            TokenValidationParameters tokenValidationParamsBaseline = new TokenValidationParameters
            {
                ClockSkew = TimeSpan.FromMinutes(5),
                ValidateActor = true,
                ValidateIssuerSigningKey = true,
                ValidateIssuer = true,
                ValidateAudience = true,
                ValidateLifetime = true,
                RequireExpirationTime = true,
                ValidateTokenReplay = true,
                RequireSignedTokens = true,
                RequireAudience = true,
                SaveSigninToken = true
            };

            TokenValidationParameters tokenValidationParams = new TokenValidationParameters
            {
                ClockSkew = TimeSpan.FromMinutes(5),
                ValidateActor = false,
                ValidateIssuerSigningKey = false,
                ValidateIssuer = false,             // BUG
                ValidateAudience = false,           // BUG
                ValidateLifetime = false,           // BUG
                RequireExpirationTime = false,      // BUG
                ValidateTokenReplay = false,
                RequireSignedTokens = false,
                RequireAudience = false,            // BUG
                SaveSigninToken = false
            };
        }

    }
}