DefaultJWTClaimsVerifier not compatible with `Set.of("myaudience")`

[Nicholas Albion]

If Set.of("myaudience") is passed as acceptedAudience

public DefaultJWTClaimsVerifier(final Set<String> acceptedAudience,
                    final JWTClaimsSet exactMatchClaims,
                    final Set<String> requiredClaims,
                    final Set<String> prohibitedClaims) {
...
    if (acceptedAudienceValues != null && ! acceptedAudienceValues.contains(null)) {

ImmutableCollections throws an exception at

public boolean contains(Object o) {
    return o.equals(e0) || e1.equals(o); // implicit nullcheck of o
}

because o is the null passed from .contains(null)

It would be better to use something like acceptedAudienceValues.stream().matchesAny(Objects::nonNull)

‌

‌

[Vladimir Dzhuvinov]

This is a known issue, it started appearing when people started using Set.of.

Do you have a proposal how to work around this with Java 7 code? This is the current lang level of the library.