as defined by
<a href=https://tools.ietf.org/html/rfc7519>RFC 7519</a>. See <a href=https://tools.ietf.org/html/rfc6749>OAuth 2.0</a> and
<a href=http://openid.net/connect>OIDC 1.0</a> for how this is used in the whole
authentication flow.</p><p>Examples:</p><p>Spec for a JWT that is issued by <code>https://example.com</code>, with the audience claims must be either
<code>bookstore_android.apps.example.com</code> or <code>bookstore_web.apps.example.com</code>.
The token should be presented at the <code>Auth