HaoK

 public interface IAuthenticationManager
 {
     Task<AuthenticateInfo> AuthenticateAsync(string scheme);
     Task ChallengeAsync(string scheme, AuthenticationProperties properties, ChallengeBehavior behavior);
     Task ForbidAsync(string scheme, AuthenticationProperties properties);
  
     // Should SignIn/SignOut live in a separate service? If yes, we could have a parallel stack of
     // SignInScheme/Builder/SignInHandler
     Task SignInAsync(string scheme, ClaimsPrincipal principal);
     Task SignOutAsync(string scheme, AuthenticationProperties properties);