diff --git a/auth_jwt/models/auth_jwt_validator.py b/auth_jwt/models/auth_jwt_validator.py index 687e8e34a3..5a270aeb16 100644 --- a/auth_jwt/models/auth_jwt_validator.py +++ b/auth_jwt/models/auth_jwt_validator.py @@ -226,7 +226,10 @@ def _decode(self, token, secret=None): ) if len((self.audience or "").split(",") or []) > 0: for key_value in (self.audience or "").split(","): - if key_value in (payload.get(payload_key) or "").split(" "): + payload_value = payload.get(payload_key) + if not payload.get(payload_key).isinstance(list): + payload_value = (payload.get(payload_key) or "").split(" ") + if key_value in payload_value: return payload raise UnauthorizedInvalidToken() except Exception as e: