Hey 👋

just a heads-up for everybody. Since 26.0.0 now audiences are also inside the refreshtoken with the key aud_x.

This seems a little weird to me as this was introduced with the commit: Initial experimental support for Resource Indicators which is an experimental feature and I would expect to only see the change with refreshtoken if it is enabled.

Not a huge deal, but I didn't find this mentioned inside the Release notes or in the migration guide under notable changes, so I just wanted to create a discussion to document it if somebody has problems with the length of the refreshtoken after this change.

Thanks for your work keycloak team!