OptionalaudienceRequested audience. Defaults to authorizationParams.audience.
OptionalextraAdditional parameters forwarded to the token endpoint and can be used for vendor-specific or RFC 8693 extension parameters. Parameters in the security denylist are silently stripped.
OptionalscopeRequested scope(s). Defaults to authorizationParams.scope.
Optionalsubject_The security token to exchange. Defaults to the current user's access token.
Optionalsubject_URI identifying the type of subject_token.
Defaults to urn:ietf:params:oauth:token-type:access_token.
Options for RequestContext.customTokenExchange. All fields are optional — unset fields fall back to
authorizationParamsconfig or RFC 8693 defaults where applicable.