clientId
Authorized party or client identifier from the JWT access token.
The plugin checks the standard OpenID Connect azp claim first, then falls back to the OAuth client_id claim used by some providers. Returns null when neither claim is present.