Authorization endpoint, e.g. https://account.vana.org/oauth/authorize.
Token endpoint, e.g. https://account.vana.org/oauth/token.
OAuth client_id (public; PKCE protects the flow).
Redirect URI registered with the authorization server.
OptionalscopeDefault scope; can be overridden per call.
OptionaltokenWhere to persist access + refresh tokens and the in-flight code verifier
between authorize → callback. Defaults to a fresh
InMemoryTokenStore. Use IndexedDB/localStorage-backed
implementations for browser apps where the user navigates away during the
dance.
OptionalfetchOverride the global fetch (e.g. for tests). Defaults to globalThis.fetch.
Optionalinit: RequestInitOptionalinit: RequestInitOptionalgenerateOverride the random-state generator (mostly for tests). Must return a URL-safe string of >= 16 bytes of entropy.
Constructor options for OAuthClient.