Access token has two audiences?

Hey @woeterman94 ,

You cannot remove the /userinfo audience. It is included by default for all issued Access Tokens.

If you specify an audience of your custom API identifier and a scope of openid, then the resulting access token’s aud claim will be an array rather than a string, and the access token will be valid for both your custom API and for the /userinfo endpoint. Other than in the use case of a single custom API as well as Auth0’s /userinfo endpoint, your access tokens will be unable to have two or more audiences.

I am not familiar with your application, but it seems like it is parsing the audience incorrectly. That’s what you should focus on.

More information about this topic can be read here: Get Access Tokens