// with the difference that we allow multiple audiences.
//
// AuthenticationConfiguration has a audienceMatchPolicy field, but the only supported value now is "MatchAny".
// So, The default match behavior is to match at least one of the audiences in the ID token.
func (v *idTokenVerifier) verifyAudience(t *oidc.IDToken) error {

org/junit/experimental/categories/Categories$IncludeCategory.class package org.junit.experimental.categories; public abstract interface Categories$IncludeCategory extends annotation.Annotation { public abstract Class[] value(); public abstract boolean matchAny(); } org/junit/experimental/categories/IncludeCategories$IncludesAny.class package org.junit.experimental.categories; synchronized class IncludeCategories$IncludesAny extends Categories$CategoryFilter { public void IncludeCategories$IncludesAny(java.util.List);...

  The "audienceMatchPolicy" can be empty (or unset) when a single audience is specified in the "audiences" field.
  The "audienceMatchPolicy" must be set to "MatchAny" when multiple audiences are specified in the "audiences" field. ([#123165](https://github.com/kubernetes/kubernetes/pull/123165), [@aramase](https://github.com/aramase))