t() :: %OIDC.Auth.Challenge{
  auth_time_required: boolean(),
  client_config: module(),
  client_id: OIDC.client_id(),
  id_token_iat_max_time_gap: non_neg_integer() | nil,
  issuer: OIDC.issuer(),
  mandatory_acrs: [OIDC.acr()] | nil,
  nonce: OIDC.nonce() | nil,
  oauth2_metadata_updater_opts: Keyword.t() | nil,
  pkce_code_verifier: String.t() | nil,
  redirect_uri: OIDC.redirect_uri(),
  response_type: OIDC.response_type(),
  scope: [OIDC.scope()],
  server_metadata: OIDC.server_metadata() | nil,
  state_param: String.t(),
  token_endpoint_tesla_auth_middleware_opts: Keyword.t() | nil
}