diff --git a/auth_jwt/models/auth_jwt_validator.py b/auth_jwt/models/auth_jwt_validator.py index 687e8e34a3..bcc47fea8b 100644 --- a/auth_jwt/models/auth_jwt_validator.py +++ b/auth_jwt/models/auth_jwt_validator.py @@ -226,7 +226,12 @@ def _decode(self, token, secret=None): ) if len((self.audience or "").split(",") or []) > 0: for key_value in (self.audience or "").split(","): - if key_value in (payload.get(payload_key) or "").split(" "): + payload_value = ( + payload.get(payload_key) + if isinstance(payload.get(payload_key), list) + else (payload.get(payload_key) or "").split(" ") + ) + if key_value in payload_value: return payload raise UnauthorizedInvalidToken() except Exception as e: