Wt

Some OAuth platforms use organization specific authorization endpoints, f.ex. the Microsoft identity platform:

Microsoft uses the following format for the authorization endpoint: https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize

For tenant, often the value common can be used, but this is not always the case (f.ex. when you want to limit the login to a specific organisation).

To support this situation, it would be useful to add a virtual OAuthProcess::authorizationEndpoint function and use this virtual function when constructing the authorize url inside OAuthProcess::authorizeUrl. The default implementation of this new virtual function would be:

std::string OAuthProcess::authorizationEndpoint () {return service_.authorizationEndpoint();}

By inheriting OAuthProcess (and OAuthService), one could implement the different authorization endpoints, f.ex. based on the organization for which the user is trying to sign in.

Currently, the only possibility (if you want to use the Wt::Auth framework) is to create a separate OAuthService for each tenant, but this require also separate redirect urls. This is somewhat cumbersome as all of them need to be registered in the Microsoft identity platform.