Retrieve Custom ClaimsIdentity object from Principle's Identities - asp.net-core-mvc

Question

I have wired up my Okta-OIDC-SSO and verified I'm able to log in properly. I have set up my claims and also was able to get a thumbnail of the user through Active Directory. Now, I wanted to have access to my actual business user model on my website whenever needed. I tried to smuggle it as a claim but claims are the only types of string and not complex objects. So I created my own Identity:
Custom ClaimsIdentity:
public class SystemUserIdentity : ClaimsIdentity
{
private SystemUserModel CurrentUser { get; set; }
public SystemUserIdentity(SystemUserModel systemUser, params Claim[] claims) : base(claims) => CurrentUser = systemUser;
public SystemUserIdentity(SystemUserModel systemUser, IEnumerable<Claim> claims) : this(systemUser,claims.ToArray()) { }
}
Auth setup in ConfigureServices:
public void ConfigureServices(IServiceCollection services)
{
...
RegisterAuth(services);
}
private void RegisterAuth(IServiceCollection services)
{
services.AddAuthentication(sharedOptions =>
{
sharedOptions.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
sharedOptions.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
sharedOptions.DefaultSignOutScheme = CookieAuthenticationDefaults.AuthenticationScheme;
sharedOptions.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
})
.AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, option =>
{
option.AccessDeniedPath = "/AccessDenied";
})
.AddOpenIdConnect(OpenIdConnectDefaults.AuthenticationScheme, options =>
{
options.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
options.ResponseType = OpenIdConnectResponseType.Code;
options.ClientId = Configuration["SSO:ClientId"];
options.ClientSecret = Configuration["SSO:ClientSecret"];
options.Authority = Configuration["SSO:Issuer"];
options.GetClaimsFromUserInfoEndpoint = true;
options.CallbackPath = "/authorization-code/callback";
options.TokenValidationParameters = new TokenValidationParameters { ValidateIssuer = true };
options.SaveTokens = true;
options.Events = new OpenIdConnectEvents
{
OnTokenValidated = async ctx =>
{
var service = ctx.HttpContext.RequestServices.GetRequiredService<IUserService>();
var ssoId = ctx.Principal!.FindFirstValue("preferred_username");
var staff = await service.GetUserByIdAsync(ssoId ?? string.Empty);
if (staff != null)
{
staff.Thumbnail = GetUserThumbFromActiveDirectory(WebHost.IsDevelopment() ? "DAPreview.ae": "dca.com", "UserPrincipalName", ssoId, "thumbnailPhoto");
var claims = new List<Claim>
{
new(nameof(staff.Id), staff.Id),
new(nameof(staff.Username), staff.Username),
new(ClaimTypes.Name, "DACRLClaim"),
new(ClaimTypes.Email, staff.Email),
new(ClaimTypes.GivenName, staff.EmployeeName)
};
claims.AddRange(staff.Roles.Select(role => new Claim(ClaimTypes.Role, $"{role.Id}-{role.Name}")));
var appIdentity = new SystemUserIdentity(staff, claims);
ctx.Principal?.AddIdentity(appIdentity);
}
}
};
});
services.AddAuthorization(options =>
{
options.AddPolicy("SuperAdminPolicy", policy =>
policy.RequireAssertion(context =>
context.User.HasClaim(c => c.Type == "Role" && c.Value.Contains("Super Admin"))));
});
}
Usage in the target MVC view:
#inject IHttpContextAccessor HttpContextAccess
#{
var currentUser = HttpContextAccess.HttpContext?.User;
var temp = currentUser?.Identities.SingleOrDefault(w => w.Name == "DACRLClaim");
var reqModel = (SystemUserIdentity)temp;
}
So, basically, I need the custom ClaimsIdentity (SystemUserIdentity) that I added in Startup as it has my actual user object and everything.