Fix handling of array aud values

Author: GaryGSC

lib/index.js

@@ -191,8 +191,11 @@ async function authenticate (options, cache, headers) {
     const aud = verifiedJWTs.current.raw.aud
     if (aud) {
       // aud can be a string or an array: https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.3
-      if (typeof aud === 'string' && !aud.startsWith(options.basePath)) throw new AuthenticationError('Invalid aud in JWT')
-      if (!aud.some(audience => audience.startsWith(options.basePath))) throw new AuthenticationError('Invalid aud in JWT')
+      if (typeof aud === 'string') {
+        if (!aud.startsWith(options.basePath)) throw new AuthenticationError('Invalid aud in JWT')
+      } else {
+        if (!aud.some(audience => audience.startsWith(options.basePath))) throw new AuthenticationError('Invalid aud in JWT')
+      }
     }
   }