如何使用ADAL库向ADFS中的身份令牌添加更多声明？

string authority = "https://your-adfs-server/adfs";
string clientId = "your-client-id";
string clientSecret = "your-client-secret";

AuthenticationContext authContext = new AuthenticationContext(authority);
ClientCredential clientCredential = new ClientCredential(clientId, clientSecret);

AuthenticationResult authResult = await authContext.AcquireTokenAsync(resource, clientCredential);

string accessToken = authResult.AccessToken;

// 验证访问令牌的签名
TokenValidationParameters validationParameters = new TokenValidationParameters
{
    ValidAudience = "your-audience",
    ValidIssuer = "your-issuer",
    IssuerSigningKeys = GetSigningKeysFromADFS()
};

SecurityToken validatedToken;
JwtSecurityTokenHandler tokenHandler = new JwtSecurityTokenHandler();
ClaimsPrincipal claimsPrincipal = tokenHandler.ValidateToken(accessToken, validationParameters, out validatedToken);

ClaimsIdentity claimsIdentity = new ClaimsIdentity(claimsPrincipal.Identity);
claimsIdentity.AddClaim(new Claim("claim-type", "claim-value"));

ClaimsPrincipal newClaimsPrincipal = new ClaimsPrincipal(claimsIdentity);

JwtSecurityToken newToken = tokenHandler.CreateJwtSecurityToken(
    issuer: "your-issuer",
    audience: "your-audience",
    subject: newClaimsPrincipal.Identity as ClaimsIdentity,
    signingCredentials: GetSigningCredentialsFromADFS(),
    notBefore: DateTime.UtcNow,
    expires: DateTime.UtcNow.AddHours(1)
);

string newAccessToken = tokenHandler.WriteToken(newToken);