OIDC Public clients

[Cantor, Scott]

> I would also be interested in setting the "aud" claim to allow one
> client to use the tokens issued for another client.

That's generally done with the resource indicator extension (passing resource parameters in the request). Assuming it passes validation anything requested as a resource is added to the access token's audience set.

The Client Credentials grant material is the best discussion of that.

-- Scott