code doesn't really force that one way or another, but if we're indexof checking, this might make the most conceptual sense:
```
if (audience_whitelist.indexOf("*") > -1 || audience_whitelist.indexOf(req.body.audience) > -1) {
  // permit
  return ...yay...
}
return ...boo...
```