builder.Services.AddOpenIdConnect(options =>
    {
        options.Events = new OpenIdConnectEvents
        {
            OnTokenValidated = context =>
            {
                // Get the "Access Token" not the "ID Token"
                var accessToken = context.TokenEndpointResponse?.AccessToken;

                // Read the token contents
                var handler = new JwtSecurityTokenHandler();
                var jwtToken = handler.ReadJwtToken(accessToken);

                // Read the roles from the claims and map them to new claims format
                var roles = jwtToken.Claims.Where(claim => claim.Type == "roles")
                    .Select(claim => JsonSerializer.Deserialize<RoleModel>(claim.Value, new JsonSerializerOptions
                    {
                        PropertyNamingPolicy = JsonNamingPolicy.CamelCase
                    }))
                    .ToList();

                var roleClaims = roles.Select(role => new Claim("roles", role.Key)).ToList();


                // Add claims to the principal
                var claimsIdentity = context.Principal.Identity as ClaimsIdentity;
                claimsIdentity?.AddClaims(roleClaims);

                return Task.CompletedTask;
            }
        }
    }
);

builder.Services.AddOpenIdConnect(options =>
    {
        options.Events = new OpenIdConnectEvents
        {
            OnTokenValidated = context =>
            {
                // Get the "Access Token" not the "ID Token"
                var accessToken = context.TokenEndpointResponse?.AccessToken;

                // Read the token contents
                var handler = new JwtSecurityTokenHandler();
                var jwtToken = handler.ReadJwtToken(accessToken);

                // Read the roles from the claims and map them to new claims format
                var roles = jwtToken.Claims.Where(claim => claim.Type == "roles")
                    .Select(claim => JsonSerializer.Deserialize<RoleModel>(claim.Value, new JsonSerializerOptions
                    {
                        PropertyNamingPolicy = JsonNamingPolicy.CamelCase
                    }))
                    .ToList();

                var roleClaims = roles.Select(role => new Claim("roles", role.Key)).ToList();


                // Add claims to the principal
                var claimsIdentity = context.Principal.Identity as ClaimsIdentity;
                claimsIdentity?.AddClaims(roleClaims);

                return Task.CompletedTask;
            }
        }
    }
);

var organizationsApi = new OrganizationsApi(client);
var organization = await organizationsApi.GetOrganizationAsync();

var organizationsApi = new OrganizationsApi(client);
var organization = await organizationsApi.GetOrganizationAsync();