Auth 2.0

Microsoft.AspNetCore.Authentication2.0.cs

 public interface IAuthenticationManager
 {
     Task<AuthenticateInfo> AuthenticateAsync(string scheme);
     Task ChallengeAsync(string scheme, AuthenticationProperties properties, ChallengeBehavior behavior);
     Task ForbidAsync(string scheme, AuthenticationProperties properties);
  
     // Should SignIn/SignOut live in a separate service? If yes, we could have a parallel stack of
     // SignInScheme/Builder/SignInHandler
     Task SignInAsync(string scheme, ClaimsPrincipal principal);
     Task SignOutAsync(string scheme, AuthenticationProperties properties);
 }

// Should probably revisit the (auto) challenge behavior as part of this
public enum ChallengeBehavior
{
  Automatic,
  Unauthorized,
  Forbidden
}

public class AuthenticateInfo
{
  public ClaimsPrincipal Principal { get; set; }
  public AuthenticationProperties Properties { get; set; }
}

public class AuthenticationOptions {
    public IDictionary<Name, AuthenticationScheme> SchemeMap { get; }

    public void AddScheme(string name, Action<AuthenticationSchemeBuilder> configureBuilder) {
         var builder = new AuthenticationSchemeBuilder(name);
         configureBuilder(builder);
         SchemeMap[name] = builder.Build();
    }
}

public class AuthenticationSchemeBuilder 
{
   public AuthenticationScheme Build();
}

public class AuthenticationScheme
{
    public string Name { get; }
    public IAuthenticationSchemeHandler Handler { get; }
    public Type HandlerType { get; }
}

public interface IAuthenticationSchemeProvider {
    AuthenticationScheme GetScheme(string name);
}

public interface IAuthenticationSchemeHandler
{
  Task AuthenticateAsync(AuthenticateContext context);
  Task ChallengeAsync(ChallengeContext context);
  Task SignInAsync(SignInContext context);
  Task SignOutAsync(SignOutContext context);
}

public static IServiceCollection AddAuthentication(static this IServiceCollection services, Action<AuthenticationOptions> configure) {
   services.TryAddSingleton<IAuthenticationManager, DefaultAuthenticationManager>();
   services.TryAddSingleton<IAuthenticationSchemeProvider, DefaultAuthenticationSchemeProvider>();
   services.Configure(configure);
   return services;
}