OptionalauthOptionalclientFallback URL for the client app (used when no redirectTo is present). Optional.
OptionalendOverride Google's end-session endpoint. When omitted, the provider redirects directly to postLogoutRedirectUri (or accounts.google.com/Logout as fallback).
OptionaljwksOverride Google's JWKS URI. Default: https://www.googleapis.com/oauth2/v3/certs.
Test injection only — production deployments rely on the default.
OptionalredirectExact URLs a consumer-supplied redirect_to may name. Absent or empty
means no redirect_to is accepted at all — see createFederationRedirectPolicy.
OptionalsessionCookie / session domain; every non-loopback redirectAllowlist entry must be inside it. Optional.
URL of the auth-callback page (used to build the post-login redirect). Optional.