GetPayloadClaim<object>("aud") will return a single string when aud i…

…s a simple string.
AzureAD · Sep 27, 2023 · cb46565 · cb46565
1 parent ba30608
commit cb46565
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 2 deletions.
diff --git a/src/Microsoft.IdentityModel.JsonWebTokens/Json/JsonWebToken.PayloadClaimSet.cs b/src/Microsoft.IdentityModel.JsonWebTokens/Json/JsonWebToken.PayloadClaimSet.cs
@@ -44,9 +44,14 @@ internal JsonClaimSet CreatePayloadClaimSet(byte[] bytes, int length)
                         else
                         {
                             if (reader.TokenType != JsonTokenType.Null)
+                            {
                                 _audiences.Add(JsonSerializerPrimitives.ReadString(ref reader, JwtRegisteredClaimNames.Aud, ClassName));
-
-                            claims[JwtRegisteredClaimNames.Aud] = _audiences;
+                                claims[JwtRegisteredClaimNames.Aud] = _audiences[0];
+                            }
+                            else
+                            {
+                                claims[JwtRegisteredClaimNames.Aud] = _audiences;
+                            }
                         }
                     }
                     else if (reader.ValueTextEquals(JwtPayloadUtf8Bytes.Azp))

diff --git a/test/Microsoft.IdentityModel.JsonWebTokens.Tests/JsonWebTokenTests.cs b/test/Microsoft.IdentityModel.JsonWebTokens.Tests/JsonWebTokenTests.cs
@@ -275,6 +275,15 @@ public static TheoryData<GetPayloadValueTheoryData> CheckAudienceValuesTheoryDat
             {
                 var theoryData = new TheoryData<GetPayloadValueTheoryData>();
 
+                theoryData.Add(new GetPayloadValueTheoryData("stringFromSingleAsObject")
+                {
+                    ClaimValue = "audience",
+                    PropertyName = "aud",
+                    PropertyType = typeof(object),
+                    PropertyValue = new List<string> { "audience" },
+                    Json = JsonUtilities.CreateUnsignedToken("aud", "audience")
+                });
+
                 theoryData.Add(new GetPayloadValueTheoryData("stringFromSingleInList")
                 {
                     ClaimValue = "audience",