@Test
public void testAuthenticate_audienceNotAllowed() throws Exception {

  when(verifier.verify(TOKEN)).thenReturn(token);
  when(config.getClientIds()).thenReturn(ImmutableList.of(CLIENT_ID));
  when(config.getAudiences()).thenReturn(ImmutableList.of("audience2"));
  assertNull(authenticator.authenticate(request));
  assertNotNull(attr.get(Attribute.ID_TOKEN));
}