The "Aud" (audience) OPTIONAL Reserved Claim Name
identifies the recipients that the JSON Web Token
is intended for.
Each principal intended to process the JWT MUST identify itself with a value in the audience JSON Web Token Claim.
If the principal processing the claim does not identify itself with a value in the "Aud" claim when this JSON Web Token Claim is present, then the JWT MUST be rejected.
In the general case, the "aud" value is an array of case-sensitive strings, each containing a StringOrURI value.
In the special case when the JWT has one audience, the "aud" value MAY be a single case-sensitive string containing a StringOrURI value.
The interpretation of audience values is generally application specific.
There might be more information for this subject on one of the following: