CreateAccessToken reveals username to host

IAuthorizationServerHost.CreateAccessToken now has access to authoring
usernames.

Fixes #219

1 files changed, 6 insertions, 0 deletions

diff --git a/src/DotNetOpenAuth.OAuth2.ClientAuthorization/OAuth2/Messages/IAccessTokenRequest.cs b/src/DotNetOpenAuth.OAuth2.ClientAuthorization/OAuth2/Messages/IAccessTokenRequest.cs
index 65378f9..81acb77 100644
--- a/src/DotNetOpenAuth.OAuth2.ClientAuthorization/OAuth2/Messages/IAccessTokenRequest.cs
+++ b/src/DotNetOpenAuth.OAuth2.ClientAuthorization/OAuth2/Messages/IAccessTokenRequest.cs
@@ -30,6 +30,12 @@ namespace DotNetOpenAuth.OAuth2.Messages {
 		string ClientIdentifier { get; }
 
 		/// <summary>
+		/// Gets the username of the authorizing user, when applicable.
+		/// </summary>
+		/// <value>A non-empty string; or <c>null</c> when no user has authorized this access token.</value>
+		string UserName { get; }
+
+		/// <summary>
 		/// Gets the scope of operations the client is allowed to invoke.
 		/// </summary>
 		HashSet<string> Scope { get; }