Interface OAuthOptions

Expected audience (aud) claim values for access_token validation. This may need to be configured if multiple audience values need to be supported, or if the IDP is returning a value that doesn't match the default. Providing this value will extend the default behavior: the clientId property is always an accepted aud claim value

The clientId passed to the IDP in the client_id property and is validated against the 'audience' (aud) claim of the JWT tokens. For example for EntraId, the clientId should be the Enterprise App ID related to this OIDC configuration

The issuer (iss) claim value(s) provided by the IDP for the access_token. Passing this value extends the info read from the .well-known endpoint. This may be required for example for EntraID which uses different issuer for the access_token

The well-known data endpoint for the IDP