code: def _get_id_token_user(token, issuers, audiences, allowed_client_ids, time_now, cache):
    for issuer_key, issuer in issuers.items():
      issuer_cert_uri = convert_jwks_uri(issuer.jwks_uri)
      try:
        parsed_token = _verify_signed_jwt_with_certs(
            token, time_now, cache, cert_uri=issuer_cert_uri)
      except Exception:
        _logger.debug(
            'id_token verification failed for issuer %s', issuer_key, exc_info=True)
        continue
      issuer_values = _listlike_guard(issuer.issuer, 'issuer', log_warning=False)
      if isinstance(audiences, _Mapping):
        audiences = audiences[issuer_key]
      if _verify_parsed_token(
          parsed_token, issuer_values, audiences, allowed_client_ids,
          is_legacy_google_auth=(issuer.issuer == _ISSUERS)):
        email = parsed_token['email']
        return users.User(email)