The intended audience (recipient) of this session.
Permission scopes granted in this session (e.g., ['read', 'write']).
Time-to-live in seconds.
OptionalsessionOptional unique session identifier, used for revocation. If not provided, a random UUID is generated.
Options for creating a new Session.