Variable: BOT\_OPENID\_METADATA

const BOT_OPENID_METADATA: "https://login.botframework.com/v1/.well-known/openidconfiguration" = "https://login.botframework.com/v1/.well-known/openidconfiguration"

OpenID metadata document for tokens the Bot Service sends a bot in the public cloud. The JWKS URI is read from this document rather than hard-coded so a key rotation on Microsoft’s side needs no release here.

Overridable per call (VerifyOptions.metadataUrl) because a sovereign cloud (GCC High / DoD) publishes its own metadata endpoint - and because it makes the verifier testable against a local key set.