Optional
requireControls the signed request object validation strategy.
When true
, the signed request object (represented as a JWT) retrieved from the
authorisationRequestUri
can only be validated using stored verifier certificates.
When false
, verification is first attempted using the stored verifier certificates.
If that fails, the client's metadata is resolved and the JWKs from this metadata are
used to validate the signed request object (represented as a JWT).
Generated using TypeDoc
Authorisation Request URI that contains parameters defined in RFC 9101.