ReadonlyagentThe own agent ID (aud).
Optional ReadonlyallowlistLoads the allow list of 17.7; absent skips point 9.
Optional ReadonlyclockThe time of every check, of the JWKS cache and of the reload throttle.
ReadonlyinstanceThe configured instance (iss); never read from discovery (09 4.5 point 4).
ReadonlyjwksFetches the JWKS (getJwks) with its max-age; see jwksFetcher.
Optional ReadonlyloggerReceives the refusals at debug (reason and a hash prefix of the jti only).
ReadonlyreplayThe jti store (point 7), usually the inbox store.
Optional Readonlysettingsadapter.invocation_token_leeway and adapter.jwks_refresh_min_interval; default the keys' defaults.
The options of InvocationVerifier.