From b5e8438ecb4fa4605ffdc0f9f0228ae240cea917 Mon Sep 17 00:00:00 2001
From: Stephen Toub <stoub@microsoft.com>
Date: Wed, 26 Jul 2023 01:11:25 -0400
Subject: [PATCH] Lazily initialize
 TokenValidationParameters.InstancePropertyBag

---
 .../TokenValidationParameters.cs                               | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/Microsoft.IdentityModel.Tokens/TokenValidationParameters.cs b/src/Microsoft.IdentityModel.Tokens/TokenValidationParameters.cs
index cf40db0b45..c98a01afdd 100644
--- a/src/Microsoft.IdentityModel.Tokens/TokenValidationParameters.cs
+++ b/src/Microsoft.IdentityModel.Tokens/TokenValidationParameters.cs
@@ -189,6 +189,7 @@ public class TokenValidationParameters
         private TimeSpan _clockSkew = DefaultClockSkew;
         private string _nameClaimType = ClaimsIdentity.DefaultNameClaimType;
         private string _roleClaimType = ClaimsIdentity.DefaultRoleClaimType;
+        private Dictionary<string, object> _instancePropertyBag;
 
         /// <summary>
         /// This is the default value of <see cref="ClaimsIdentity.AuthenticationType"/> when creating a <see cref="ClaimsIdentity"/>.
@@ -483,7 +484,7 @@ public virtual ClaimsIdentity CreateClaimsIdentity(SecurityToken securityToken,
         /// Gets a <see cref="IDictionary{String, Object}"/> that is unique to this instance.
         /// Calling <see cref="Clone"/> will result in a new instance of this IDictionary.
         /// </summary>
-        public IDictionary<string, object> InstancePropertyBag { get; } = new Dictionary<string, object>();
+        public IDictionary<string, object> InstancePropertyBag => _instancePropertyBag ??= new Dictionary<string, object>();
 
         /// <summary>
         /// Gets a value indicating if <see cref="Clone"/> was called to obtain this instance.