在标识服务器4中使用CustomTokenRequestValidationContext返回令牌响应中的用户角色

public class CustomTokenRequestValidator : DefaultTokenRequestValidator
{
    public CustomTokenRequestValidator(IClientSecretValidator clientValidator, ILogger<DefaultTokenRequestValidator> logger, ICustomTokenService customTokenService)
        : base(clientValidator, logger)
    {
        CustomTokenService = customTokenService;
    }

    public ICustomTokenService CustomTokenService { get; }

    public override async Task ValidateAsync(TokenRequestValidationContext context)
    {
        // 调用基类的验证方法
        await base.ValidateAsync(context);

        // 获取自定义参数
        var customParam = context.Result.ValidatedRequest.Raw.Get("custom_param");

        // 根据自定义参数查询用户角色信息
        var userRoles = CustomTokenService.GetUserRoles(customParam);

        // 将用户角色信息添加到令牌响应中
        context.Result.Claims.Add(new Claim("role", userRoles));
    }
}