Options for introspecting an opaque access token.
optionalclientCertificate:string
PEM-encoded client certificate used for certificate-bound token validation.
optionalgroups:string[]
List of group names or identifiers that must be present in the token's groups claim.
optionalscopes:string[]
List of scopes that must all be present in the token's scope claim.
optionalvalidateCertificateBinding:boolean
When true, validates certificate binding for certificate-bound access tokens.
false;