OptionalfetchReturn an access token for a request.
When forceRefresh is true, the previous token was rejected with a 401
and the provider should refresh it before returning. Providers own token
storage and refresh-token rotation.
OptionalonCalled when the request is still unauthorized after one refresh.
Fetch implementation used to send requests. Defaults to global fetch.