Optionaloptions: { timeoutMs?: number }StaticconnectOptionaloptions: { name?: string; timeoutMs?: number }OptionalresponseType?: stringresponse_type is typically "code".
OptionalclientId?: stringOptionalredirectUri?: stringOptionalscope?: stringOptionalstate?: stringOptionaloptions: { expiresIn?: bigint }OptionalgrantType?: stringgrant_type is "authorization_code" or "urn:ietf:params:oauth:grant-type:token-exchange".
Optionalcode?: stringOptionalredirectUri?: stringOptionalclientId?: stringOptionalstate?: stringstate correlates authorization-code exchanges with Authorize.
Optionalscope?: stringscope is the requested scope for issued tokens.
OptionalsubjectToken?: stringsubject_token is the bearer token being exchanged per RFC 8693.
OptionalsubjectTokenType?: stringsubject_token_type is the RFC 8693 token type for subject_token.
OptionalexpiresIn?: bigintexpires_in is a Gestalt request-side extension for the desired access-token lifetime in seconds. The provider MAY clamp or default it; expires_in in TokenResponse remains authoritative per RFC 6749 §5.1. 0 means use the grant default.
Optionaltoken?: stringOptionaltokenTypeHint?: stringtoken_type_hint is "access_token" or "refresh_token".
Identity models the shared Gestalt authentication protocol.