update client_id claims key

[k-hasan-19]

Decoded jwt payload contains no aud key. It has client_id key for audience client_id retrieval

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[lyndon160]

@k-hasan-19 do you know why they use client_id instead of aud? This seems problematic as mostly libs and tools, like this one use the aud field.

Edit:

Seems like are within the JWT RFC, just different to what most of the industry is doing.