Configuration for JWT verification using RSA256 with a JWKS endpoint.
Expected JWT audience claim. Null to skip audience validation.
Additional claims to require in the JWT.
Expected JWT issuer claim.
URL of the JWKS endpoint (for example "https://example.com/.well-known/jwks.json").
Clock skew tolerance for token expiration checks.