Tokens

Three kinds of token leave this provider, and a client never has to guess which it is holding: an access token for a resource server, an ID token about the person, and a refresh token to ask again. Encryption says what the provider encrypts and for whom.

A token format is a class implementing the issuer interface of that format, so adding one is adding a class and announcing it follows from wiring it.