ReadonlyauthorizationAuthorization endpoint (user is redirected here)
Optional ReadonlyrevocationToken revocation endpoint (optional)
ReadonlytokenToken endpoint (code → access_token exchange)
Optional ReadonlyuserinfoUserInfo endpoint for token verification.
The response is passed to UpstreamOAuthOptions.mapUserInfo.
Required unless a custom verifyAccessToken is provided.
Upstream OAuth endpoint URLs.