OptionalclientPEM-encoded client certificate used for certificate-bound token validation.
OptionalgroupsList of group names or identifiers that must be present in the token's groups claim.
OptionalscopesList of scopes that must all be present in the token's scope claim.
OptionalvalidateWhen true, validates certificate binding for certificate-bound access tokens.
Options for introspecting an opaque access token.