Update InteractiveChallengeRequest and InteractiveSignOutRequest to support attaching an identity token or login hint

sandbox/OpenIddict.Sandbox.Console.Client/InteractiveService.cs

@@ -126,6 +126,7 @@ public class InteractiveService : BackgroundService
                         var nonce = (await _service.SignOutInteractivelyAsync(new()
                         {
                             CancellationToken = stoppingToken,
+                            IdentityTokenHint = response.BackchannelIdentityToken ?? response.FrontchannelIdentityToken,
                             ProviderName = provider
                         })).Nonce;
 

src/OpenIddict.Client/OpenIddictClientModels.cs

@@ -165,6 +165,17 @@ public static class OpenIddictClientModels
         [EditorBrowsable(EditorBrowsableState.Advanced)]
         public string? GrantType { get; init; }
 
+        /// <summary>
+        /// Gets or sets the optional identity token hint that will
+        /// be sent to the authorization server, if applicable.
+        /// </summary>
+        public string? IdentityTokenHint { get; set; }
+
+        /// <summary>
+        /// Gets or sets the optional login hint that will be sent to the authorization server, if applicable.
+        /// </summary>
+        public string? LoginHint { get; set; }
+
         /// <summary>
         /// Gets or sets the application-specific properties that will be added to the context.
         /// </summary>
@@ -253,6 +264,17 @@ public static class OpenIddictClientModels
         /// </summary>
         public CancellationToken CancellationToken { get; init; }
 
+        /// <summary>
+        /// Gets or sets the optional identity token hint that will
+        /// be sent to the authorization server, if applicable.
+        /// </summary>
+        public string? IdentityTokenHint { get; set; }
+
+        /// <summary>
+        /// Gets or sets the optional login hint that will be sent to the authorization server, if applicable.
+        /// </summary>
+        public string? LoginHint { get; set; }
+
         /// <summary>
         /// Gets or sets the application-specific properties that will be added to the context.
         /// </summary>

src/OpenIddict.Client/OpenIddictClientService.cs

@@ -389,7 +389,9 @@ public class OpenIddictClientService
                 CancellationToken = request.CancellationToken,
                 CodeChallengeMethod = request.CodeChallengeMethod,
                 GrantType = request.GrantType,
+                IdentityTokenHint = request.IdentityTokenHint,
                 Issuer = request.Issuer,
+                LoginHint = request.LoginHint,
                 Principal = new ClaimsPrincipal(new ClaimsIdentity()),
                 ProviderName = request.ProviderName,
                 RegistrationId = request.RegistrationId,
@@ -1399,7 +1401,9 @@ public class OpenIddictClientService
             var context = new ProcessSignOutContext(transaction)
             {
                 CancellationToken = request.CancellationToken,
+                IdentityTokenHint = request.IdentityTokenHint,
                 Issuer = request.Issuer,
+                LoginHint = request.LoginHint,
                 Principal = new ClaimsPrincipal(new ClaimsIdentity()),
                 ProviderName = request.ProviderName,
                 RegistrationId = request.RegistrationId,