verifyIDToken doesn't check disabled status #454
Description
The verifyIDToken function checks to see whether the ID token is revoked, but never actually checks to see whether or not it's disabled.
{{ message }}
The verifyIDToken function checks to see whether the ID token is revoked, but never actually checks to see whether or not it's disabled.