Ensured claims injector is more exhaustive

src/LiteCharmsSecurity.STS.Identity/Services/ClaimsInjectorProfileService.cs

@@ -2,6 +2,8 @@
 using Duende.IdentityServer.Services;
 using LiteCharmsSecurity.Admin.EntityFramework.Shared.Entities.Identity;
 using Microsoft.AspNetCore.Identity;
+using System.Collections.Generic;
+using System.Linq;
 using System.Security.Claims;
 using System.Threading;
 using System.Threading.Tasks;
@@ -16,15 +18,30 @@ public sealed class ClaimsInjectorProfileService(UserManager<UserIdentity> userM
     public async Task GetProfileDataAsync(ProfileDataRequestContext context, CancellationToken ct)
     {
         var user = await userManager.GetUserAsync(context.Subject);
+
         if (user != null && !string.IsNullOrEmpty(user.Email))
         {
-            context.IssuedClaims.Add(new Claim("email", user.Email));
-            context.IssuedClaims.Add(new Claim("email_verified", user.EmailConfirmed ? "true" : "false"));
+            var claims = new List<Claim>
+            {
+                new("email", user.Email),
+                new("email_verified", user.EmailConfirmed ? "true" : "false")
+            };
 
             if (!string.IsNullOrEmpty(user.UserName))
-            {
-                context.IssuedClaims.Add(new Claim("preferred_username", user.UserName));
-            }
+                claims.Add(new Claim("preferred_username", user.UserName));
+
+            var roles = await userManager.GetRolesAsync(user);
+
+            foreach (var role in roles)
+                claims.Add(new Claim("role", role));
+
+            var userClaims = await userManager.GetClaimsAsync(user);
+
+            foreach (var claim in userClaims)
+                if (!claims.Any(c => c.Type == claim.Type && c.Value == claim.Value))
+                    claims.Add(claim);
+            
+            context.IssuedClaims = claims;
         }
     }