https://tools.ietf.org/html/rfc7519

JwtValidator implements iss clam as optional, samy way as stated in RFC7519. The validator is supposed to ignore iss check if its issuers set was empty, however even though it logs that issuer check is ignored it still checks it and rejects all tokens that do not contain iss claim.