added user email upn data in request session #364

[ImamAbdullahKhan]

The OAuth2CallbackView has user as None if user is not registered in Django, so it can't provide user details but the AdfsAuthCodeBackend class authenticate function is called from the Django Backend authenticate function, so instead of extending OAuth2CallbackView, I have extended AdfsAuthCodeBackend class authenticate function to store username_claim in request session.
It can be used in login_failed as "user_email = request.session.get("username_claim")".

Please let me know if you need any further clarifications

[ImamAbdullahKhan]

I think coverage / codecov (pull request) test failure can resolved by updating the token:

[tim-schilling]

This isn't something I'm willing to merge. I don't see the utility in the library capturing the user's email in the session. If there's a hook that can be added to make this easier for you to implement, that is more likely to be accepted.

[ImamAbdullahKhan]

Thanks for the feedback! Instead of modifying the backend to store claims in the session, I’ve implemented a Django signal hook. This allows developers to listen for authentication events and handle claims as needed, also added sample code in signals.rst file. Please review it and let me know if still needs any changes.

[tim-schilling]

Is there a reason you're not overriding validate_access_token in your code to achieve the logic you want?

[tim-schilling]

I'm against modifying the project for this purpose at this point. It should be possible to override validate_access_token in your own project to achieve what you're going for. That means the project is flexible enough as is and no changes are required.

Additionally, I suspect you may be feeding AI directly responses to us which isn't the most polite thing to do.

[ImamAbdullahKhan]

Ok Thanks for your Response, I thought Django unregistered email address display was a good feature to be add to the Login Failed Page.