Add possibility to add extra parameters to authn request.

Author: Rebecka Gulliksson

src/flask_pyoidc/flask_pyoidc.py

@@ -11,9 +11,11 @@
 
 class OIDCAuthentication(object):
     def __init__(self, flask_app, client_registration_info=None, issuer=None,
-                 provider_configuration_info=None, userinfo_endpoint_method='POST'):
+                 provider_configuration_info=None, userinfo_endpoint_method='POST',
+                 extra_request_args=None):
         self.app = flask_app
         self.userinfo_endpoint_method = userinfo_endpoint_method
+        self.extra_request_args = extra_request_args or {}
 
         self.client = Client(client_authn_method=CLIENT_AUTHN_METHOD)
         if not issuer and not provider_configuration_info:
@@ -59,6 +61,7 @@ def _authenticate(self):
             'nonce': flask.session['nonce'],
         }
 
+        args.update(self.extra_request_args)
         auth_req = self.client.construct_AuthorizationRequest(request_args=args)
         login_url = auth_req.request(self.client.authorization_endpoint)
         return redirect(login_url)

tests/requirements.txt

@@ -1,3 +1,4 @@
 pytest
 mock
-responses==0.5.1
+responses==0.5.1
+six

tests/test_flask_pyoidc.py

@@ -1,4 +1,6 @@
 import json
+from six.moves.urllib.parse import parse_qsl, urlparse
+
 from mock import MagicMock
 
 import flask
@@ -65,3 +67,14 @@ def test_no_userinfo_request_is_done_if_no_userinfo_endpoint_method_is_specified
         authn.client.do_user_info_request = userinfo_request_mock
         authn._do_userinfo_request(state, None)
         assert not userinfo_request_mock.called
+
+    def test_authenticatate_with_extra_request_parameters(self):
+        extra_params = {"foo": "bar", "abc": "xyz"}
+        authn = OIDCAuthentication(self.app, provider_configuration_info={'issuer': ISSUER},
+                                   client_registration_info={'client_id': 'foo'},
+                                   extra_request_args=extra_params)
+
+        with self.app.test_request_context('/'):
+            a = authn._authenticate()
+        request_params = dict(parse_qsl(urlparse(a.location).query))
+        assert set(extra_params.items()).issubset(set(request_params.items()))