OptionalclientPEM-encoded client certificate used for certificate-bound token validation.
OptionalgroupsList of group names or identifiers that must be present in the token's groups claim.
OptionaljwksPre-fetched JSON Web Key Set to use for signature verification instead of fetching from the server.
OptionalscopesList of scopes that must all be present in the token's scope claim.
OptionalvalidateWhen true, validates certificate binding for certificate-bound access tokens.
Options for validating a JWT access token.