Update the introspection middleware to support the "jti" claim

Author: MonkeyJamboree

src/AspNet.Security.OAuth.Introspection/OAuthIntrospectionConstants.cs

@@ -14,6 +14,7 @@ public static class Claims {
             public const string NotBefore = "nbf";
             public const string Scope = "scope";
             public const string Subject = "sub";
+            public const string TokenId = "jti";
             public const string TokenType = "token_type";
             public const string Username = "username";
         }
@@ -30,6 +31,7 @@ public static class Parameters {
         public static class Properties {
             public const string Audiences = ".audiences";
             public const string Scopes = ".scopes";
+            public const string TicketId = ".ticket_id";
             public const string Token = "access_token";
         }
 

src/AspNet.Security.OAuth.Introspection/OAuthIntrospectionHandler.cs

@@ -286,6 +286,13 @@ protected virtual async Task<AuthenticationTicket> CreateTicketAsync(string toke
                         continue;
                     }
 
+                    // Add the token identifier as a property on the authentication ticket.
+                    case OAuthIntrospectionConstants.Claims.TokenId: {
+                        properties.Items[OAuthIntrospectionConstants.Properties.TicketId] = property.Value<string>();
+
+                        continue;
+                    }
+
                     // Extract the scope values from the space-delimited
                     // "scope" claim and store them as individual claims.
                     // See https://tools.ietf.org/html/rfc7662#section-2.2

src/Owin.Security.OAuth.Introspection/OAuthIntrospectionConstants.cs

@@ -14,6 +14,7 @@ public static class Claims {
             public const string NotBefore = "nbf";
             public const string Scope = "scope";
             public const string Subject = "sub";
+            public const string TokenId = "jti";
             public const string TokenType = "token_type";
             public const string Username = "username";
         }
@@ -34,6 +35,7 @@ public static class Parameters {
         public static class Properties {
             public const string Audiences = ".audiences";
             public const string Scopes = ".scopes";
+            public const string TicketId = ".ticket_id";
             public const string Token = "access_token";
         }
 

src/Owin.Security.OAuth.Introspection/OAuthIntrospectionHandler.cs

@@ -275,6 +275,13 @@ protected virtual async Task<AuthenticationTicket> CreateTicketAsync(string toke
 
                         continue;
                     }
+                        
+                    // Add the token identifier as a property on the authentication ticket.
+                    case OAuthIntrospectionConstants.Claims.TokenId: {
+                        properties.Dictionary[OAuthIntrospectionConstants.Properties.TicketId] = property.Value<string>();
+
+                        continue;
+                    }
 
                     // Extract the scope values from the space-delimited
                     // "scope" claim and store them as individual claims.