OptionalauthorizationAuthorization Server metadata for enforcing JAR signing policy. Includes standard Authorization Server metadata plus require_signed_request_object. When require_signed_request_object is true, the server will reject unsigned requests. Defaults to false (permissive) if not provided.
OptionaldpopOptionalnowThe current time to use when verifying the JWTs. If not provided current time will be used.
The authorization request JWT to verify. If this value was returned from
parsePushedAuthorizationRequestyou MUST provide this value to ensure the JWT is verified.