OAuth 2.0 client ID
Private key for signing JWTs (CryptoKey from Web Crypto API)
Key ID (kid) - must match the kid in JWKS registered on the server
OAuth 2.0 scopes (e.g., "system/*.read")
OptionaltokenToken expiration buffer in seconds (refresh token this many seconds before expiry, default: 30)
OptionalallowAllow insecure HTTP requests (for testing only, default: false)
FHIR server base URL