Jwt audience validation: support array instead of only string

[ericbl]

Current implementation of jwt.decode with audience support only one string: https://github.com/mpdavis/python-jose/blob/master/jose/jwt.py#L483

while pyjwt support a list of audiences: https://github.com/jpadilla/pyjwt/blob/master/jwt/api_jwt.py#L499

as well as authlib: https://github.com/lepture/authlib/blob/main/authlib/jose/rfc7519/claims.py#L130 but authlib is quite different implementation.

is python-jose a fork of pyjwt? if yes, can this fork get updated? if not, can we update specific methods? Especially this one?

is is anyway still recommended to use python-jose? I see quite some comments recommending authlib instead... edit: looking at the release history, 3.3.0 from 2020-06 but 3.4.0 from 2025-02, so almost after 5 years. I understand people leaving the boat. Is there a new will to maintain this lib? choosing between the 3 is not easy...