$clientId property
OAuth client identifier used to obtain this session.
Some providers do not mirror client_id into issued tokens, so we keep
the original client identifier to continue building DPoP proofs later.
Implementation
final String? $clientId;