@Test
public void shouldAllowNoAudience() {

  idTokenPayload.setAudience(null);
  idTokenPayload.setEmail("foo@foo.iam.gserviceaccount.com");
  assertThat(validator.authenticate("token"), is(idToken));
}