This patch was authored and released by @gwynne.
- Allow
AudienceClaimto represent more than one audience, per RFC 7519 § 4.1.3 - Add
verifyIntendedAudience(includes:)method for conveniently verifying that the audience is the intended one. - Add unit tests for new functionality.
Because the Value type of AudienceClaim is now [String] instead of String, this change is API-breaking!
This would normally require a semver-major update, but as the package is still in RC, I think it can scrape past with a semver-minor, especially since the change is to obey spec.