issuedAt

Epoch-second timestamp when the token was issued by the authorization server.

Defaults to clock.now - expiresIn, which represents the worst-case assumption that the token was issued a full lifetime ago (i.e., it may be near expiry). Callers that know the actual issuance time should pass it explicitly.