droid.apps.example.com</code> or <code>bookstore_web.apps.example.com</code>.
The token should be presented at the <code>Authorization</code> header (default). The Json web key set (JWKS)
will be discovered followwing OpenID Connect protocol.</p><pre><code class=language-yaml>issuer: https://example.com
audiences:
- bookstore_android.apps.example.com
  bookstore_web.apps.example.com
</code></pre><p>This example specifies token in non-default location (<code>x-goog-iap-jwt-assertion</code> header). It also
d