AcceptedAudiences

The audiences (aud) accepted when verifying tokens.

- AcceptedAudiences.none rejects tokens with an audience, while tokens without an audience are accepted. This is the default. - AcceptedAudiences.any accepts tokens with any audience, and tokens without an audience. - AcceptedAudiences(audience, audiences*) accepts tokens with at least one of the audiences, while other tokens are rejected.

Rejecting tokens with an audience by default follows the JWT specification, which requires tokens to be rejected when the audience is not recognized (RFC 7519 section 4.1.3).