Add support custom params during token exchange

[dopsonbr]

I have a use case where I need to pass custom params, like roles, during the token exchange. Are you open to accepting a PR that enables this behavior?

[damienbod]

@dopsonbr LGTM thanks

I need to validate that this will work per spec. Most have custom params just for the authorize request.

What STS do you use?

Greetings Damien

[dopsonbr]

My company uses an on-prem installation of PING so the STS isn't public.

[damienbod]

@dopsonbr Looking into to this. Main problem is that the custom params are sent then for both the authorize and the token request with this change. I'm not sure other STS will work when send additional custom params to the token end point. I need to validate this first.

[dopsonbr]

@dopsonbr Looking into to this. Main problem is that the custom params are sent then for both the authorize and the token request with this change. I'm not sure other STS will work when send additional custom params to the token end point. I need to validate this first.

@damienbod I agree this is potentially problematic. What if I moved it into a new config parameter customTokenParams in the OpenIdConfiguration object?

[damienbod]

@dopsonbr Yes this would be great, then the PR will not effect anything else.

Greetings Damien

[dopsonbr]

@damienbod I just made the change and added tests. Please let me know what you think

[damienbod]

Thanks @dopsonbr , works great. Will be released in version 11.6.4