The expected audience for tokens from this provider
OptionalclientOAuth client ID for this provider (used by OAuth proxy for upstream auth)
ProtectedconfigThe issuer URL for this provider (must match the 'iss' claim in tokens)
ProtectedjwksThe JWKS endpoint URL for retrieving signing keys
Unique name identifier for this provider
Gets the signing key for token verification with retry logic
Checks if a given issuer URL belongs to this provider
Validates Google-specific configuration
Google Identity Platform authentication provider implementation