title: why we need validate-issuer in azure B2C passport?
body: <p>I have Azure AD B2C in node, I want to know that why we use validateIssuer = true or false?</p>
  
  <pre><code>passport.use(new BearerStrategy({
  
      isB2C: true,
      validateIssuer: false,
      loggingLevel: 'trace',
      passReqToCallback: false,
  }
  </code></pre>
  
  <p>if i make it false it send me warning to make true in production environment so why it is require to validate issuer while using Passport Azure AD B2C</p>