From 3c55028ae9a8c43555dda3e9998f6565fc917349 Mon Sep 17 00:00:00 2001
From: Narthana Epa <narthana.epa@gmail.com>
Date: Thu, 10 Nov 2022 17:44:02 +1100
Subject: [PATCH] Add a comment about audience

---
 api/oidc.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/api/oidc.go b/api/oidc.go
index 957120dc7b..ef487bfe9c 100644
--- a/api/oidc.go
+++ b/api/oidc.go
@@ -23,6 +23,9 @@ func (c *Client) OidcToken(jobId string, audience ...string) (*OidcToken, *Respo
 	case 1:
 		m = &oidcTokenRequest{Audience: audience[0]}
 	default:
+		// While the spec supports multiple audiences in an Id JWT, our API does
+		// not support issuing them.
+		// See: https://openid.net/specs/openid-connect-core-1_0.html#IDToken.
 		return nil, nil, ErrAudienceTooLong
 	}