OptionalallowOptionalclockTreat a token as expired this many seconds before its true expiry.
OptionalfetchInject a custom fetch (tests, instrumentation). Defaults to global fetch.
IdentityServer base URL. Discovery is resolved below this origin.
OptionalscopesOptionaltimeoutPer-discovery/token-request deadline. Defaults to 30 seconds.
Only tests may opt into plain HTTP on loopback hosts.