Include Login Hint in Authentication Properties

[craigbroadman]

By including the login hint in Authentication Properties, I am able to access the value to pass to an external IdP.

Example here....

http://stackoverflow.com/questions/24957152/owin-pass-custom-query-parameters-in-authentication-request

[dnfclas]

Hi @craigbroadman, I'm your friendly neighborhood .NET Foundation Pull Request Bot (You can call me DNFBOT). Thanks for your contribution!

In order for us to evaluate and accept your PR, we ask that you sign a contribution license agreement. It's all electronic and will take just minutes. I promise there's no faxing. https://cla2.dotnetfoundation.org.

TTYL, DNFBOT;

[brockallen]

I don't think you need this change. Can't you access the signin message in your event callback on the OIDC middleware?

[craigbroadman]

If that is possible then yes, that would solve this issue. Could you provide me an example of accessing the signin message in the event callback on the OIDC middleware?

[brockallen]

I don't have code off hand, but you can call the OWIN extensions we provide in the callback. https://identityserver.github.io/Documentation/docsv2/advanced/owin.html

[brockallen]

Something like this:

                Notifications = new OpenIdConnectAuthenticationNotifications
                {
                    RedirectToIdentityProvider = ctx =>
                    {
                        var signinId = ctx.OwinContext.Request.Query["signin"];
                        var msg = ctx.OwinContext.Environment.GetSignInMessage(signinId);
                        var hint = msg.LoginHint;
                        return Task.FromResult(0);
                    }
                }

[brockallen]

Can we close this?

[craigbroadman]

Yes, this can be closed, thank you very much for your help.

[dnfclas]

Hi @craigbroadman, I'm your friendly neighborhood .NET Foundation Pull Request Bot (You can call me DNFBOT). Thanks for your contribution!

In order for us to evaluate and accept your PR, we ask that you sign a contribution license agreement. It's all electronic and will take just minutes. I promise there's no faxing. https://cla2.dotnetfoundation.org.

TTYL, DNFBOT;

[craigbroadman]

Although the above code does give me access to the login hint as required, including the "login_hint" in the dictionary (as per the pull request) means that the Google implementation works out of the box without creating a custom provider...

Please see https://katanaproject.codeplex.com/SourceControl/latest#src/Microsoft.Owin.Security.Google/GoogleOAuth2AuthenticationHandler.cs

What are your thoughts?