The expected audience for tokens from this provider
OptionalclientOAuth client ID for this provider (optional, used by OAuth proxy for upstream authentication)
OptionaldomainProvider domain, where the provider hosts its OAuth endpoints somewhere other than its issuer (optional, used by the OAuth proxy). Cognito is the case that needs it: its issuer is the user-pool URL, but /authorize and /token live on the hosted-UI domain.
The issuer URL for this provider (must match the 'iss' claim in tokens)
The JWKS endpoint URL for retrieving signing keys
Unique name identifier for this provider
Extracts user information from the JWT payload Different providers use different claim names
Gets the signing key for token verification
Checks if a given issuer URL belongs to this provider
Validates that the provider configuration is complete and valid
Interface for authentication providers in MemberJunction Enables support for any OAuth 2.0/OIDC compliant provider