AbstractThe expected audience for tokens from this provider
OptionalclientOAuth client ID for this provider (used by OAuth proxy for upstream auth)
ProtectedconfigThe issuer URL for this provider (must match the 'iss' claim in tokens)
ProtectedjwksThe JWKS endpoint URL for retrieving signing keys
Unique name identifier for this provider
AbstractextractAbstract method for extracting user info - must be implemented by each provider
Gets the signing key for token verification with retry logic
Checks if a given issuer URL belongs to this provider
Validates that required configuration is present
Base implementation of IAuthProvider with common functionality Concrete providers should extend this class and use
Register Class
decorator with BaseAuthProvider as the base class