How to get a custom claims field in a token? And how to define the claims field

[pyy-alt]

Describe the bug

Orchard Core version

To Reproduce

Expected behavior

Logs and screenshots

[pyy-alt]

如何在token中拿到 自定义 claims 字段？以及如何定义 claims 字段？ #18100

[github-actions[bot]]

Thank you for submitting your first issue, awesome! 🚀 We're thrilled to receive your input. If you haven't completed the template yet, please take a moment to do so. This ensures that we fully understand your feature request or bug report. On what happens next, see the docs.

If you like Orchard Core, please star our repo and join our community channels.

[pyy-alt]

I am using .net8 + OrchardCore 2.1.7

[hishamco]

Please describe your issue in English

[hishamco]

@pyy-alt, which token are you referring to?

[pyy-alt]

`using System.Text.Json;
using System.Text.Json.Nodes;
using Microsoft.Extensions.Logging;
using MOTS.IdentityCenter.UsersModule.Services;
using OpenIddict.Abstractions;
using OpenIddict.Server;
using OrchardCore.ContentManagement;
using OrchardCore.Users.Models;
using OrchardCore.Users.Services;

namespace MOTS.IdentityCenter.UsersModule.Handle;

public class CustomOpenIddictClaimsHandler : IOpenIddictServerHandler<OpenIddictServerEvents.ProcessSignInContext>
{
private readonly IUserService _userService;
private readonly IContentManager _contentManager;
private readonly ILogger _logger;

public CustomOpenIddictClaimsHandler(
    IUserService userService,
    IContentManager contentManager,
    ILogger<CustomOpenIddictClaimsHandler> logger)
{
    _userService = userService;
    _contentManager = contentManager;
    _logger = logger;
}

public async ValueTask HandleAsync(OpenIddictServerEvents.ProcessSignInContext context)
{
    var userName = context.Principal.Identity?.Name;
    _logger.LogInformation("[OIDC ClaimsHandler] 当前用户: {UserName}", userName ?? "null");
    if (string.IsNullOrEmpty(userName))
    {
        _logger.LogWarning("[OIDC ClaimsHandler] 用户名为空，跳过扩展字段注入");
        return;
    }

    var userEntity = await _userService.GetUserAsync(userName);
    if (userEntity is User orchardUser)
    {
        _logger.LogInformation("[OIDC ClaimsHandler] 成功获取用户实体: {UserType}", userEntity.GetType().Name);
        if (orchardUser.Properties != null && orchardUser.Properties.ContainsKey("User"))
        {
            var userNode = orchardUser.Properties["User"];
            if (userNode is JsonObject userObj && userObj.ContainsKey("UserProfilePart2"))
            {
                var part2Node = userObj["UserProfilePart2"];
                if (part2Node is JsonObject part2Obj)
                {
                    var part2 = part2Obj.Deserialize<UserProfilePart2>();
                    if (part2 != null)
                    {
                        if (part2.UserName != null && !string.IsNullOrEmpty(part2.UserName.Text))
                        {
                            context.Principal.AddClaim("user_name", part2.UserName.Text, OpenIddictConstants.Destinations.AccessToken);

                            _logger.LogInformation("[OIDC ClaimsHandler] 注入 user_name claim: {UserName}", part2.UserName.Text);
                        }
                        else
                        {
                            _logger.LogWarning("[OIDC ClaimsHandler] UserProfilePart2.UserName 为空或未设置");
                        }
                        if (part2.CustomField != null && !string.IsNullOrEmpty(part2.CustomField.Text))
                        {
                            context.Principal.AddClaim("custom_field", part2.CustomField.Text, OpenIddictConstants.Destinations.AccessToken);

                            _logger.LogInformation("[OIDC ClaimsHandler] 注入 custom_field claim: {CustomField}", part2.CustomField.Text);
                        }
                        else
                        {
                            _logger.LogWarning("[OIDC ClaimsHandler] UserProfilePart2.CustomField 为空或未设置");
                        }
                    }
                    else
                    {
                        _logger.LogWarning("[OIDC ClaimsHandler] 反序列化 UserProfilePart2 失败");
                    }
                }
                else
                {
                    _logger.LogWarning("[OIDC ClaimsHandler] UserProfilePart2 节点不是 JsonObject");
                }
            }
            else
            {
                _logger.LogWarning("[OIDC ClaimsHandler] UserProfilePart2 不存在于用户属性中");
            }
        }
        else
        {
            _logger.LogWarning("[OIDC ClaimsHandler] 用户属性中不包含 'User' 节点");
        }
    }
    else
    {
        _logger.LogWarning("[OIDC ClaimsHandler] 获取用户实体失败或类型不匹配");
    }

    // 输出最终 claims 列表
    var claimsList = context.Principal.Claims.Select(c => $"{c.Type}:{c.Value}").ToList();
    _logger.LogInformation("[OIDC ClaimsHandler] 最终 Principal Claims: {Claims}", string.Join(", ", claimsList));
}

}
`

`using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Identity;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting; // 导入 IHostApplicationLifetime，如果需要
using Microsoft.Extensions.Logging;
using MOTS.IdentityCenter.UsersModule.Handle;
using OrchardCore.Modules;
using MOTS.IdentityCenter.UsersModule.Services;
using MOTS.IdentityCenter.UsersModule.Models;
using OpenIddict.Server;
using OrchardCore.Users;
using OrchardCore.Users.Models;
using OrchardCore.ContentManagement;
using OrchardCore.DisplayManagement.Handlers;

namespace MOTS.IdentityCenter.UsersModule;

public class Startup : OrchardCore.Modules.StartupBase
{
public override void ConfigureServices(IServiceCollection services)
{
// 注册 UserProfilePart - 确保 OrchardCore 能识别这个 ContentPart
services.AddContentPart();

    // 注册显示和编辑驱动
    services.AddScoped<IDisplayDriver<UserProfilePart>, UserProfilePartDisplayDriver>();
    services.AddScoped<IDisplayDriver<UserProfilePart>, UserProfilePartEditDriver>();
    
    // 添加日志配置，方便调试
    services.AddLogging(configure => configure.AddConsole());

    // 注册自定义 claims transformation
    services.AddScoped<Microsoft.AspNetCore.Authentication.IClaimsTransformation, MOTS.IdentityCenter.UsersModule.Services.CustomClaimsTransformation>();
    
    services.AddOpenIddict()
        .AddServer(options =>
        {
            // ... 你的其他 OpenIddict 配置 
            // 注册自定义事件处理器
            options.AddEventHandler<OpenIddictServerEvents.ProcessSignInContext>(builder =>
            {
                builder.UseScopedHandler<CustomOpenIddictClaimsHandler>();
            }); 
        });
}

}`

I need to insert my custom user extension attributes into the access_token using a claim method. How should I implement this?
My version is 2.1.7