oauth-2.0 - AspNet 身份 2 : Customize OAuth endpoint response

Question

我成功实现了我的自定义 OAuthAuthorizationServerProvider .但是当我登录并检索 token 时，我的客户不知道用户的角色、声明等。

我目前添加了一个 webapi Controller 来返回委托(delegate)人的声明列表，但我对此并不满意。

请求 token 时，当前响应如下所示:

{
    access_token: "qefelgrebjhzefilrgo4583535",
    token_type: "bearer",
    expires_in: 59
}

Q> 如何让它返回类似于以下代码段的内容？

{
    access_token: "qefelgrebjhzefilrgo4583535",
    token_type: "bearer",
    expires_in: 59,
    user: {
        name: 'foo',
        role: 'bar'
    }
}

我目前的进度:
OAuthAuthorizationServerProvider#TokenEndpoint(OAuthTokenEndpointContext) 的文档说:

Called at the final stage of a successful Token endpoint request. An application may implement this call in order to do any final modification of the claims being used to issue access or refresh tokens. This call may also be used in order to add additional response parameters to the Token endpoint's json response body.

我找不到任何关于如何自定义响应的示例，而且 asp-net Identity 的源代码还没有发布，所以我很困惑。

Answer 1

可能是您正在寻找TokenEndpoint OAuthAuthorizationServerProvider 的方法覆盖.

public override Task TokenEndpoint(OAuthTokenEndpointContext context)
{
    foreach (KeyValuePair<string, string> property in context.Properties.Dictionary)
    {
        context.AdditionalResponseParameters.Add(property.Key, property.Value);
    }

    return Task.FromResult<object>(null);
}