Custom OIDC

​

Requirements

• Valid issuer URL
• Discovery/JWKS endpoint
• Audience values configured in Char

​

Integration pattern

const idToken = await getIdTokenFromYourProvider();

agent.connect({
  publishableKey: "pk_live_...",
  idToken,
});

​

Validation checks

• Signature via JWKS
• Issuer match
• Audience match
• Expiration