Allow provider-specific configuration fields
Optional audienceExpected audience for tokens
Optional authorityAuthority URL for providers that use it (e.g., MSAL)
Optional clientOAuth client ID
Optional clientOAuth client secret (backend only, never expose to frontend)
Optional domainProvider domain (e.g., 'your-domain.auth0.com')
Optional issuerToken issuer URL (must match 'iss' claim in JWT)
Optional jwksJWKS endpoint URL for retrieving signing keys
Unique name identifier for this provider instance
Optional redirectOAuth redirect URI for callback after authentication
Optional scopesOAuth scopes to request
Optional tenantTenant ID for multi-tenant providers (e.g., Azure AD)
Type of authentication provider (e.g., 'msal', 'auth0', 'okta')
Base configuration for authentication providers Used by both backend (JWT validation) and frontend (OAuth flows)