OptionalaudienceOptionalfetchInjectable for tests.
OptionalnowInjectable clock (ms).
OptionalrefreshRefresh this many seconds before the token actually expires. Default 60.
OptionalretriesRetries for transient token-endpoint failures (network, 429, 5xx). Default 0.
OptionalretryBase backoff (ms), doubled each retry. Default 200.
OptionalscopeSpace-delimited scopes to request.
OptionaltimeoutTimeout (ms) for the token request. Default 10000. Pass 0 to disable.
The OAuth token endpoint (e.g. https://issuer/oauth/token).
RFC 8707 audience / resource indicator, if your IdP needs it (e.g. Auth0).