services.AddAuthentication(options =>{options.DefaultAuthenticateScheme = "MyCookieAuthenticationScheme";options.DefaultChallengeScheme = "MyCookieAuthenticationScheme";options.DefaultSignInScheme = "MyCookieAuthenticationScheme";}).AddCookie("MyCookieAuthenticationScheme", options =>{options.AccessDeniedPath ="/Home";options.LoginPath = "/Home";});

app.UseAuthentication();

public JsonResult LoginCheck(string username, string password){var user = _***.***(username, password); //检测用户是否正确if (user.code == 0){var claims = new List<Claim>(){new Claim(ClaimTypes.Sid,Convert.ToString(user.data.id)),new Claim(ClaimTypes.Name,user.data.username),                    //new Claim(ClaimTypes.Role,user.data.usergroup)
                };string groupstr = user.data.usergroup; //通过后台调用权限属性string[] GroupSplit = groupstr.Split(',');if (GroupSplit != null){for (int i = 0; i < GroupSplit.Length; i++){claims.Add(new Claim(ClaimTypes.Role, GroupSplit[i]));}}var identity = new ClaimsIdentity(claims, "Login");var userPrincipal = new ClaimsPrincipal(identity);HttpContext.SignInAsync("MyCookieAuthenticationScheme", userPrincipal, new AuthenticationProperties{ExpiresUtc = DateTime.UtcNow.AddMinutes(20),IsPersistent = false,AllowRefresh = false});}return Json(new { code = user.code, msg = user.result, data = user.data });}

var userId = User.FindFirst(ClaimTypes.Sid).Value;var userName = User.Identity.Name;var rolelist = User.FindAll(ClaimTypes.Role);HttpContext.Response.WriteAsync($"测试结果  {userId}---{userName}--{rolelist}");

public async Task<IActionResult> Logout(){await HttpContext.SignOutAsync("MyCookieAuthenticationScheme");return RedirectToAction("Index", "Home");}