How to get AUD value as a single value as its coming as array with few other clients names as below? I need only “client_name”.
“aud”: [
“client_name”,
“abc”,
“account”
],
the audience (aud) value is a list. You must handle it as a list. If your client program cannot handle audience as a list then you have to fix the client program, but on the server side this will always be a list.
The goal of this field is to list all the targeted audiences (or we could also say the list of client_id of the accepted applications) for this token. It means this token is valid for usage on all these applications.
Now if these applications should not be accepted in the token that’s another problem, you should play with application roles and client scopes, especially removing the ‘full’ client scope) to restrict which applications are present at the end in the access token.
That’s not 100% correct…
The spec says, it is a list of string values, but it may also be single string value:
RFC 7519 - JSON Web Token (JWT) - Section 4.1.3. “aud” (Audience) Claim
…In the general case, the “aud” value is an array of case-
sensitive strings, each containing a StringOrURI value. In the
special case when the JWT has one audience, the “aud” value MAY be a
single case-sensitive string containing a StringOrURI value…