token-config.js

eas: {
  plugins: [
    {
      type: "oidc",
      issuer: {
        discover_url: "https://example.com/.well-known/openid-configuration",
      },
      client: {
        client_id: "tenantA",
        client_secret: "tenantSecret",
      },
      scopes: ["openid", "profile", "email", "login_info"], // must include openid
      redirect_uri: "https://auth.example.com:445/oauth/callback",
      features: {
        authorization_token: "id_token",
      },
      assertions: {
        exp: true,
        /**
        * assert the 'not before' attribute of the token(s)
        */
        nbf: false,
        iss: true,
        userinfo: [],
        id_token: [],
      },
      cookie: {
        domain: "example.com", //defaults to request domain, could do sso with more generic domain
      },
    },
  ], // list of plugin definitions, refer to PLUGINS.md for details
}