v1.46.1
Fixes the OpenID Connect provider to more accurately follow the OpenID Connect Audiences spec by fixing a bug where we'd only check the aud
claim if it were a string, but not an array. We now handle the cases where,
- The
aud
is a single string containing the Client ID - The
aud
is an array. In this case, we check to see if the Client ID is present in the array.
Big thanks to @OvermindDL1 for the contribution! 🎉