protected Set<String> determineServiceAudience() {
        val oauthRegisteredService = (OAuthRegisteredService) registeredService;
        if (StringUtils.isNotBlank(tokenAudience)) {
            return Set.of(tokenAudience);
        }
        if (oauthRegisteredService.getAudience().isEmpty()) {
            return Set.of(token.getClientId());
        }
        return oauthRegisteredService.getAudience();
    }
This is {@link OAuth20JwtAccessTokenEncodableCipher}.

@author Misagh Moayyed
@since 7.2.0
support/cas-server-support-oauth-core-api/src/main/java/org/apereo/cas/support/oauth/web/response/accesstoken/response/OAuth20JwtAccessTokenEncodableCipher.java