From 90f0b784958198b2e79da4298124a8e005d90352 Mon Sep 17 00:00:00 2001
From: Simon Inman <simoninman@google.com>
Date: Mon, 11 Dec 2017 11:48:35 +0000
Subject: [PATCH] Add optional params to PasswordCredentialsToken

Allow clients to pass additional URL parameters as part of the
PasswordCredentialsToken grant.

Fixes #259
---
 oauth2.go | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/oauth2.go b/oauth2.go
index 4bafe873d..d109d43be 100644
--- a/oauth2.go
+++ b/oauth2.go
@@ -145,6 +145,17 @@ func (c *Config) AuthCodeURL(state string, opts ...AuthCodeOption) string {
 	return buf.String()
 }
 
+// A PasswordCredentialOption is passed to Config.AuthCodeURL.
+type PasswordCredentialOption interface {
+	setValue(url.Values)
+}
+
+// SetPasswordCredentialParam builds a PasswordCredentialToken which passes
+// key/value parameters to a provider's authorization endpoint.
+func SetPasswordCredentialParam(key, value string) PasswordCredentialOption {
+	return setParam{key, value}
+}
+
 // PasswordCredentialsToken converts a resource owner username and password
 // pair into a token.
 //
@@ -156,13 +167,17 @@ func (c *Config) AuthCodeURL(state string, opts ...AuthCodeOption) string {
 //
 // The HTTP client to use is derived from the context.
 // If nil, http.DefaultClient is used.
-func (c *Config) PasswordCredentialsToken(ctx context.Context, username, password string) (*Token, error) {
-	return retrieveToken(ctx, c, url.Values{
+func (c *Config) PasswordCredentialsToken(ctx context.Context, username, password string, opts ...PasswordCredentialOption) (*Token, error) {
+	v := url.Values{
 		"grant_type": {"password"},
 		"username":   {username},
 		"password":   {password},
 		"scope":      internal.CondVal(strings.Join(c.Scopes, " ")),
-	})
+	}
+	for _, opt := range opts {
+		opt.setValue(v)
+	}
+	return retrieveToken(ctx, c, v)
 }
 
 // Exchange converts an authorization code into a token.