title: The audience is invalid error
body: <p>I have 3 projects 1- Javascript SPA 2- Web API Project, 3- IdentityServer with EF Core</p>
  
  <p>I started debugging API and Identity Server and successfully get the jwt token but, when I try to get value from API method which has Authorize Attribute I get an error:</p>
  
  <pre><code>WWW-Authenticate →Bearer error="invalid_token", error_description="The audience is invalid"
  </code></pre>
  
  <p>I could not found any property about audience in auth options. This is my configuration in API project</p>
  
  <pre><code>app.UseIdentityServerAuthentication(new IdentityServerAuthenticationOptions
          {
              ApiSecret="secret",
              Authority = "http://localhost:5000",
              ApiName="fso.Api",
              RequireHttpsMetadata = false,
          });
  </code></pre>
  
  <p>And my Config.cs file in Identity </p>
  
  <pre><code> public class Config
  {        
      public static IEnumerable&lt;ApiResource&gt; GetApiResources()
      {
          return new List&lt;ApiResource&gt;
          {                
              new ApiResource()
              {
                  Name = "fso.Api",                    
                  DisplayName = "feasion API",
                  Scopes =
                  {
                      new Scope("api1"),
                      new Scope(StandardScopes.OfflineAccess)
                  },
                  UserClaims =
                  {
                      JwtClaimTypes.Subject,
                      JwtClaimTypes.EmailVerified,
                      JwtClaimTypes.Email,
                      JwtClaimTypes.Name, 
                      JwtClaimTypes.FamilyName,
                      JwtClaimTypes.PhoneNumber,
                      JwtClaimTypes.PhoneNumberVerified,
                      JwtClaimTypes.PreferredUserName,
                      JwtClaimTypes.Profile, 
                      JwtClaimTypes.Picture, 
                      JwtClaimTypes.Locale, 
                      JwtClaimTypes.IdentityProvider,
                      JwtClaimTypes.BirthDate, 
                      JwtClaimTypes.AuthenticationTime
                  }
              }
          };
      }
      public static List&lt;IdentityResource&gt; GetIdentityResources()
      {
          return new List&lt;IdentityResource&gt;
          {
              new IdentityResources.OpenId(),
              new IdentityResources.Email(),
              new IdentityResources.Profile(),
          };
      }
  
      // client want to access resources (aka scopes)
      public static IEnumerable&lt;Client&gt; GetClients()
      {
          return new List&lt;Client&gt;
          {
              new Client
              {
                  ClientId = "fso.api",
                  AllowOfflineAccess=true,
                  ClientSecrets =
                  {
                      new Secret("secret".Sha256())
                  },
                  AllowedGrantTypes = GrantTypes.ResourceOwnerPassword,                    
                  AllowedScopes =
                  {                       
                     StandardScopes.OfflineAccess,                    
                     "api1"
                  }
              }
          };
      }
  }
  </code></pre>