OptionalfetchCustom fetch implementation (default: global fetch).
Primarily a testing hook — lets unit tests stub the authorization server
without intercepting the global.
Optionalinit: RequestInitOptionalinit: RequestInitOptionaltimeoutRequest timeout in milliseconds (default: 30_000). Guards against a silently hung authorization server blocking the caller indefinitely.
OptionalallowAllow token_endpoint to resolve to a private / loopback IP address.
Default: false (SSRF guard). The CLI opts in because the operator is
explicitly configuring the endpoint; hosted consumers accepting
user-supplied configs should leave this off.
Options for exchangeClientCredentials.