The expected audience for tokens from this provider
OptionalclientOAuth client ID for this provider (used by OAuth proxy for upstream auth)
ProtectedconfigOptionaldomainProvider domain hosting the OAuth endpoints when they aren't on the issuer (used by OAuth proxy)
The issuer URL for this provider (must match the 'iss' claim in tokens)
ProtectedjwksThe JWKS endpoint URL for retrieving signing keys
Unique name identifier for this provider
Gets the signing key for token verification with retry logic
Checks if a given issuer URL belongs to this provider
Validates Auth0-specific configuration
StaticConfigConfigures Auth0 from AUTH0_DOMAIN + AUTH0_CLIENT_ID (AUTH0_CLIENT_SECRET optional).
Mapping preserved byte-for-byte from the env block that previously lived in MJServer's config, so a deployment upgrading to the hook-based discovery sees no change.
Auth0 authentication provider implementation