PAR support in ASP.NET (OIDC middleware)

[bigred8982]

I'm not sure if this is the right place to post, but I was hoping to get feedback on an issue (and PR) that I wrote up about PAR support in aspnet. I was really hoping to get feedback from @josephdecock since he contributed the code for PAR support in ASP.NET that I had to touch.

Issue: dotnet/aspnetcore#59462
PR: dotnet/aspnetcore#61947

Basically, if you have misconfiguration (invalid client_id), the middleware throws a standard exception that bubbles up instead of firing an OIDC event (like Authorization Failed). This makes handling OIDC-specific configuration issues more difficult when PAR is in use.

I may have just totally missed the boat on how this was intended to work.

[josephdecock]

Thanks so much for giving me the reminder I needed @bigred8982! I have been meaning to look at your PR for way too long, and have now (finally!) commented on both it and the issue. PR looks great, and I hope it lands in .NET 10!