···

       
204
       
 
       
	return tokenString, nil

     

       
205
       
 
       
}

     

       
206
       
 
       


     

       
207
       
-
       
func (c *Client) SendParAuthRequest(ctx context.Context, authServerUrl string, authServerMeta *OauthAuthorizationMetadata, loginHint, scope string, dpopPrivateKey jwk.Key) (*SendParAuthResponse, error) {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
208
       
 
       
	if authServerMeta == nil {

     

       
209
       
 
       
		return nil, fmt.Errorf("nil metadata provided")

     

       
210
       
 
       
	}

     
···

       
245
       
 
       
		"scope":                 {scope},

     

       
246
       
 
       
		"client_assertion_type": {"urn:ietf:params:oauth:client-assertion-type:jwt-bearer"},

     

       
247
       
 
       
		"client_assertion":      {clientAssertion},

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
248
       
 
       
	}

     

       
249
       
 
       


     

       
250
       
 
       
	if loginHint != "" {

     

···

       
204
       
 
       
	return tokenString, nil

     

       
205
       
 
       
}

     

       
206
       
 
       


     

       
207
       
+
       
type ParAuthRequestExtra struct {

     

       
208
       
+
       
	Name  string

     

       
209
       
+
       
	Value string

     

       
210
       
+
       
}

     

       
211
       
+
       


     

       
212
       
+
       
func (c *Client) SendParAuthRequest(ctx context.Context, authServerUrl string, authServerMeta *OauthAuthorizationMetadata, loginHint, scope string, dpopPrivateKey jwk.Key, extras ...ParAuthRequestExtra) (*SendParAuthResponse, error) {

     

       
213
       
 
       
	if authServerMeta == nil {

     

       
214
       
 
       
		return nil, fmt.Errorf("nil metadata provided")

     

       
215
       
 
       
	}

     
···

       
250
       
 
       
		"scope":                 {scope},

     

       
251
       
 
       
		"client_assertion_type": {"urn:ietf:params:oauth:client-assertion-type:jwt-bearer"},

     

       
252
       
 
       
		"client_assertion":      {clientAssertion},

     

       
253
       
+
       
	}

     

       
254
       
+
       


     

       
255
       
+
       
	for _, e := range extras {

     

       
256
       
+
       
		if !strings.HasPrefix(e.Name, "ext-") {

     

       
257
       
+
       
			e.Name = "ext-" + e.Name

     

       
258
       
+
       
		}

     

       
259
       
+
       
		e.Value = url.QueryEscape(e.Value)

     

       
260
       
+
       
		params[e.Name] = []string{e.Value}

     

       
261
       
 
       
	}

     

       
262
       
 
       


     

       
263
       
 
       
	if loginHint != "" {