clientAssertionProvider

Optional provider for private_key_jwt (or similar JWT-based) client authentication.

Invoked fresh for every client-authenticated request this flow makes — including each iteration of an OOB poll — so the returned assertion can carry a unique jti and a correctly scoped, non-expired exp/aud. Mutually exclusive with clientSecret.

See also