Handled an array of audiences

[rimi-itk]

As per the OpenID Connect Core spec, the aud claim on an ID token can be an array of strings:

In the general case, the aud value is an array of case-sensitive strings. In the common special case when there is one audience, the aud value MAY be a single case-sensitive string.

(cf. https://openid.net/specs/openid-connect-core-1_0.html#IDToken}.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.41%. Comparing base (a4561d2) to head (bdd4ae4).
⚠️ Report is 8 commits behind head on develop.

Additional details and impacted files

@@              Coverage Diff              @@
##             develop      #31      +/-   ##
=============================================
+ Coverage      74.26%   74.41%   +0.14%     
  Complexity        62       62              
=============================================
  Files              1        1              
  Lines            171      172       +1     
=============================================
+ Hits             127      128       +1     
  Misses            44       44              

Flag	Coverage Δ
Unit	74.41% <100.00%> (+0.14%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.