Optionaloptions: { timeoutMs?: number }OptionalresponseType?: stringresponse_type is typically "code".
OptionalclientId?: stringOptionalredirectUri?: stringOptionalscope?: stringOptionalstate?: stringOptionalgrantType?: stringgrant_type is "authorization_code" or "urn:ietf:params:oauth:grant-type:token-exchange".
Optionalcode?: stringOptionalredirectUri?: stringOptionalclientId?: stringOptionalstate?: stringstate correlates authorization-code exchanges with Authorize.
Optionalscope?: stringscope is the requested scope for issued tokens.
OptionalsubjectToken?: stringsubject_token is the bearer token being exchanged per RFC 8693.
OptionalsubjectTokenType?: stringsubject_token_type is the RFC 8693 token type for subject_token.
Optionaltoken?: stringOptionaltokenTypeHint?: stringtoken_type_hint is "access_token" or "refresh_token".
Authentication models the shared Gestalt authentication protocol.