Allow return of custom authz endpoint request parameters to RP in response

[martynaslawinska]

yurem commented on Nov 15, 2018
It's related to Support Custom Params #647
We need to add boolean option near to each custom parameter name in JSON configuration. When this option is true oxAuth should return custom parameter back to RP.

Today we fixed collision between Gluu IDP and passport-saml. Both of them send in state jwt with additional custom parameters. We added workaround. But this new option will help to resolve this issue.

yurem commented on Dec 13, 2018
Also we return AuthZ custom parameters as headers which leads to cleaning them up on redirect. I think we need to return them in response:
oxAuth/Client/src/test/java/org/xdi/oxauth/ws/rs/AuthorizationResponseCustomHeaderTest.java
Line 81 in b33ad60
81 assertTrue(authorizationResponse.getHeaders().containsKey("CustomHeader1"));

[qbert2k]

A new boolean param was added to config. In the list of allowed custom parameter we can set returnInResponse to true to return it back to the RP. If it is set to false it will not be returned but will still be stored in session attributes.