Allow provider-specific configuration fields
OptionalaudienceExpected audience for tokens
OptionalauthorityAuthority URL for providers that use it (e.g., MSAL)
OptionalclientOAuth client ID
OptionalclientOAuth client secret (backend only, never expose to frontend)
OptionaldomainProvider domain (e.g., 'your-domain.auth0.com')
OptionalissuerToken issuer URL (must match 'iss' claim in JWT)
OptionaljwksJWKS endpoint URL for retrieving signing keys
Unique name identifier for this provider instance
OptionalredirectOAuth redirect URI for callback after authentication
OptionalscopesOAuth scopes to request
OptionaltenantTenant ID for multi-tenant providers (e.g., Azure AD)
Type of authentication provider (e.g., 'msal', 'auth0', 'okta')
Base configuration for authentication providers Used by both backend (JWT validation) and frontend (OAuth flows)