Checks every audience list names the verifying resource server (RFC 9767 section 2.1.3); an empty list is no restriction.
the token's audience lists
the verifier, or null when it is not a resource server
a refusal, or null
Checks every audience list names the verifying resource server (RFC 9767 section 2.1.3); an empty list is no restriction.