···539539 Specify the OAuth token URL.
540540 '';
541541 };
542542+ baseURL = mkOption {
543543+ type = with types; nullOr str;
544544+ default = null;
545545+ description = ''
546546+ Specify the OAuth base URL.
547547+ '';
548548+ };
549549+ userProfileURL = mkOption {
550550+ type = with types; nullOr str;
551551+ default = null;
552552+ description = ''
553553+ Specify the OAuth userprofile URL.
554554+ '';
555555+ };
556556+ userProfileUsernameAttr = mkOption {
557557+ type = with types; nullOr str;
558558+ default = null;
559559+ description = ''
560560+ Specify the name of the attribute for the username from the claim.
561561+ '';
562562+ };
563563+ userProfileDisplayNameAttr = mkOption {
564564+ type = with types; nullOr str;
565565+ default = null;
566566+ description = ''
567567+ Specify the name of the attribute for the display name from the claim.
568568+ '';
569569+ };
570570+ userProfileEmailAttr = mkOption {
571571+ type = with types; nullOr str;
572572+ default = null;
573573+ description = ''
574574+ Specify the name of the attribute for the email from the claim.
575575+ '';
576576+ };
577577+ scope = mkOption {
578578+ type = with types; nullOr str;
579579+ default = null;
580580+ description = ''
581581+ Specify the OAuth scope.
582582+ '';
583583+ };
584584+ providerName = mkOption {
585585+ type = with types; nullOr str;
586586+ default = null;
587587+ description = ''
588588+ Specify the name to be displayed for this strategy.
589589+ '';
590590+ };
591591+ rolesClaim = mkOption {
592592+ type = with types; nullOr str;
593593+ default = null;
594594+ description = ''
595595+ Specify the role claim name.
596596+ '';
597597+ };
598598+ accessRole = mkOption {
599599+ type = with types; nullOr str;
600600+ default = null;
601601+ description = ''
602602+ Specify role which should be included in the ID token roles claim to grant access
603603+ '';
604604+ };
542605 clientID = mkOption {
543606 type = types.str;
544607 description = ''