Yes, that is true, however from the client's point of view, the cause of the parameters being incorrect would be because they had an invalid iss or sub.

Having said that, Perhaps it might be better to remove this after all, because having an invalid iss and sub will be the only issues for causing an error, and this is already being done in `getClientDataFromRequest()`.