Securing Blazor WebAssembly Apps

Thanks @andrea.chiarelli

My theory at the moment is that the Microsoft Authentication library is making a request to /.well-known/openid-configuration to determine what the valid authentication request parameters and then automatically dropping any parameters that aren’t valid. I found that standard parameters such as prompt, login_hint, display, etc works with the above code, but not anything custom. Is there anything we could configure on the auth0 side to allow it?