Audience not returning in token when trying to set up OIDC with Ory Network

[aman-hh]

Hey there,
I'm trying to set up Ory Network with a server lifecycle management tool built with RoR called Foreman. I follow the steps outlined here to set up OIDC. Everything seems to be working more or less but the aud field is coming back as an empty array even though I'm adding the domain where Foreman is hosted in the OAuth2 configuration settings in the audience field via the Ory Console. Is there something I need to do in order to get the audience claim to return with the token?

[kmherrmann]

Did you set the Audience on the OAuth2 Client?

... and can you confirm that the audience is returned when getting the client e.g. via CLI:
ory get oauth2-client $id --project=$project_id

You then need to make sure the client requests the audience as per https://www.ory.sh/docs/hydra/guides/audiences#audience-in-authorization-code-implicit-and-hybrid-flows

[aman-hh]

I set the audience and it's returning via CLI. For the second step, the Foreman application makes requests to whichever URL you set as the issuer, I believe. Should this URL be /oauth2/auth with the audience added as a query param, then?

[kmherrmann]

yes, I believe so

https://{project.slug}.projects.oryapis.com/oauth2/auth
  ?client_id=...
  &scope=...
  &audience=https://api.my-cloud.com/user+https://some-tenant.my-cloud.com/

[aman-hh]

Using the /oauth2/auth endpoint still seems to return an empty audience array. Is there anything else that needs to be set in order to get the audience back in the token?