Callback functions for making HTTP requests Allows for custom fetch implementations
The client attestation Demonstration of Proof-of-Possession (DPoP) token Used for OAuth-Client-Attestation-PoP header to prove possession of the client key
The pushed authorization request to send. Accepts both signed (JAR) and unsigned variants
as returned by createPushedAuthorizationRequest. The correct form body is derived
automatically: signed requests POST { client_id, request }, unsigned requests POST
every field from authorizationRequest as flat form parameters.
The endpoint URL where the pushed authorization request will be sent This should be the authorization server's PAR endpoint
The wallet attestation JWT that proves the client's identity and capabilities Used for OAuth-Client-Attestation header
Configuration options for fetching pushed authorization response