It seems that the behaviour regarding aud field in the access and id tokens changed. In 18 aud field was present, no aud in id token. In version 19 is now in reverse. How can I add aud to the access token in keycloak 19?
There seems to be an issue created for it too: Breaking change in 'aud' audience content for access tokens · Issue #12415 · keycloak/keycloak · GitHub
@nikel123 was facing similar issue after we migrated to kc19 as well, no aud present.
As workaround, we created a mapper for the client (ref: [KEYCLOAK-8954] client_id not in aud when using keycloak gatekeeper - Red Hat Issue Tracker) comment from Neon Ngo
and then we were able to access aud in jwt. However, still see default “account” coming in though