Identityserver4: passing additional parameter along with credential

[noufionline]

Hi Dominick,

I have a scenario where user will be logged in with UserName, password and DivisionId. I want this division Id to be part of the jwt and this can be known only at the time of login.

How can you pass this division id to Identityserver so that this gets added to the token.

Thanks in advance,

Noufal

[leastprivilege]

The profile service is where you return claims for tokens.

[noufionline]

Thanks for your quick reply.

Creating custom implementation of Profile Service will allow me to do my claims transformation from the server end. that's perfect.

but in my case I need to have this division Id which is gathered as part of the log in process. (a user can occasionally login / switch to a different division).

Since the division id is not directly correlated I cannot store the division id along with the user.

is there any other way to pass the division id / or any claim from the client side itself?

Thanks,

Noufal

[tibitoth]

Maybe @leastprivilege make the ProfileService's methods virtual, to allow inheritance and override.

[brockallen]

@noufionline any claims you issue as part of the login process will be made available in the claims on the Subject in the profile service's API (assuming the request for tokens is coming thru the front-channel).

[noufionline]

@leastprivilege is it possible to pass additional claims in extra parameter like this?

    var extra = new Dictionary<string, string> {{"divisionId", "1"}};
    var tokenResponse = await tokenClient.RequestResourceOwnerPasswordAsync("userName" ,"password","api1",extra);

and somehow get access to "extra" dictionary parameter passed in RequestResourceOwnerPasswordAsync

 public class CustomProfileService:IProfileService
    {
        public Task GetProfileDataAsync(ProfileDataRequestContext context)
        {
            //Get Access to extra parameter passed in RequestResourceOwnerPasswordAsync
        }

        public Task IsActiveAsync(IsActiveContext context)
        {

        }
    }

[noufionline]

Found the solution. Thanks.

 public Task ValidateAsync(ResourceOwnerPasswordValidationContext context)
 {
         string divisionId = context.Request.Raw["divisionId"];
         //After valdating the credential
         context.Result=new GrantValidationResult(context.UserName,context.Password,new[] {new Claim("divisionId",divisionId) });
 }

[lock[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.