···539 Specify the OAuth token URL.
540 '';
541 };
542+ baseURL = mkOption {
543+ type = with types; nullOr str;
544+ default = null;
545+ description = ''
546+ Specify the OAuth base URL.
547+ '';
548+ };
549+ userProfileURL = mkOption {
550+ type = with types; nullOr str;
551+ default = null;
552+ description = ''
553+ Specify the OAuth userprofile URL.
554+ '';
555+ };
556+ userProfileUsernameAttr = mkOption {
557+ type = with types; nullOr str;
558+ default = null;
559+ description = ''
560+ Specify the name of the attribute for the username from the claim.
561+ '';
562+ };
563+ userProfileDisplayNameAttr = mkOption {
564+ type = with types; nullOr str;
565+ default = null;
566+ description = ''
567+ Specify the name of the attribute for the display name from the claim.
568+ '';
569+ };
570+ userProfileEmailAttr = mkOption {
571+ type = with types; nullOr str;
572+ default = null;
573+ description = ''
574+ Specify the name of the attribute for the email from the claim.
575+ '';
576+ };
577+ scope = mkOption {
578+ type = with types; nullOr str;
579+ default = null;
580+ description = ''
581+ Specify the OAuth scope.
582+ '';
583+ };
584+ providerName = mkOption {
585+ type = with types; nullOr str;
586+ default = null;
587+ description = ''
588+ Specify the name to be displayed for this strategy.
589+ '';
590+ };
591+ rolesClaim = mkOption {
592+ type = with types; nullOr str;
593+ default = null;
594+ description = ''
595+ Specify the role claim name.
596+ '';
597+ };
598+ accessRole = mkOption {
599+ type = with types; nullOr str;
600+ default = null;
601+ description = ''
602+ Specify role which should be included in the ID token roles claim to grant access
603+ '';
604+ };
605 clientID = mkOption {
606 type = types.str;
607 description = ''