@Test
public void validate_multipleAudiences_success() throws Exception {

  ToBeSignedJwt unverified =
      new ToBeSignedJwt.Builder()
          .setAlgorithm("HS256")
          .addAudience("foo")
          .addAudience("bar")
          .build();
  JwtValidator validator = new JwtValidator.Builder().setAudience("bar").build();
  Jwt token = validator.validate("HS256", unverified);
  assertThat(token.getAudiences()).containsExactly("foo", "bar");
}