Description

There are times when it is required to send custom headers or parameters on authorization requests. For example, the auth0-forwarded-for header is recommended to avoid a common issue with anomaly detection, which is discussed further in #302

Some background:

• AuthRequest extends Request
• AuthRequest does not extend CustomizableRequest
• TokenRequest is the only implementor of AuthRequest
• TokenRequest does extend CustomizableRequest, which allows setting custom headers, parameters, and body.

Rather than chase these issues continuously, instead we should resolve this issue for the specific issue raised in #302, as well as for other needs to configure the request.

Reproduction

Call any API that returns an AuthRequest, and note that the request cannot be customized without downcasting to TokenRequest or CustomizableRequest.

Environment

auth0-java version 1.23.0