Decoder/ Claims/ aud
Registered claim

aud

Indicates the intended recipients of the token. A verifier must confirm it is included in this audience.

Type
Registered claim (String or array)
Example
aud

Example

{ "aud": "my-api" }
Try decoding a token yourselfJust paste and the header, payload and claims unfold instantly.
Open the decoder

Related

iss
Identifies the party that issued the token, usually the name or URL of the auth server. On verification, check it matches the expected issuer.
sub
Identifies the subject the token is about (typically the user). It must be unique within the issuer's scope.
exp
The token must not be accepted after this time. Expressed as a Unix time in seconds since 1970-01-01.
nbf
The token is not valid before this time (Not Before). Paired with exp it forms a validity window.
iat
The time the token was issued. Useful for computing token age or reissue policies.
jti
A unique identifier for the token. Used to mark tokens as spent to prevent reuse or replay attacks.