Per the openid spec, aud can be an array and in special cases a single string. This fixes a bug where the array case is not handled. This is a non breaking change.
Tests for the following scenarios:
aud is an array but does NOT contain the clientId throws an error
aud is an array and does contain the clientId validates with no error
Per the openid spec, aud can be an array and in special cases a single string. This fixes a bug where the array case is not handled. This is a non breaking change.
Tests for the following scenarios:
Resolves: 1480