Multiple audiences in an AuthToken

Hey there @william3 welcome to the community, and sorry for the delayed response!

Makes total sense why you want to see the ability to add multiple resources/audiences - I’m glad you’re aware of the current recommend approach of a logical API.

In OAuth, a typical access token has one audience, to restrict any potential damage from a leaked token.

This is a point of discussion internally however I’m unable to provide any sort of time frame as to when or if this will get implemented.

I’m actually surprised that in doing a quick search through our feedback category there isn’t an existing request regarding multiple audiences. I definitely recommend creating one as our product team keeps a close eye on these and this is obviously a common ask!