A JWT containing the request information. The contents of the JWT must match the OauthRequestJwtStructure JSON schema in this document. Values in the JWT override values passed as query parameters in the main request.

Scopes of the request. Scopes are whitespace-delimited. The first scope must be openid. The second scope must be a valid scope that exists in the requested client's configuration.

Type of response to return, must be set to "code" to get the authorization code flow as expected.

Redirection URI to which the response will be sent for the authorization request.

Opaque value randomly-generated by the client/RP. Used by the caller to maintain state between request and callback. Should be constant throughout the flow. Required if not present in the request JWT.

ID of the client/RP.

List of locales to be used, separated by whitespace. Currently, only the first value is used.