Echo of GenerateTokenOptions.confirmation when set. Read-only
informational field for callers (e.g. audit log); does NOT drive
claim emission — that is GenerateTokenOptions.confirmation's job.
See RFC 7800 §3 for the cnf claim structure and Wave 2
Token-binding Cluster spec §4.4 for the field's role here.
Echo of
GenerateTokenOptions.confirmationwhen set. Read-only informational field for callers (e.g. audit log); does NOT drive claim emission — that isGenerateTokenOptions.confirmation's job. See RFC 7800 §3 for thecnfclaim structure and Wave 2 Token-binding Cluster spec §4.4 for the field's role here.