allowedAlgorithms
Accepted JWT signing algorithms.
When null, ID tokens use the provider discovery id_token_signing_alg_values_supported value when present. JWT access tokens keep the default RSA/EC verification behavior unless this set is configured explicitly.
none and HMAC algorithms are never accepted.