var claims = new List<Claim>
    {
        new Claim(ClaimTypes.Name, "Wangdachui"),
        new Claim(ClaimTypes.NameIdentifier,"1"),
        new Claim(ClaimTypes.Role,"1")
    };
 
    //var claimIdentity = new ClaimsIdentity(claims, "Client1"); //ok
    //var claimIdentity = new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme);//ok
    var claimIdentity = new ClaimsIdentity("Cookie");//ok
 
    claimIdentity.AddClaim(new Claim("UserName", "Wangdachui"));
    claimIdentity.AddClaim(new Claim("Password", "123456"));
    claimIdentity.AddClaim(new Claim("RememberMe", "on"));
    claimIdentity.AddClaim(new Claim(ClaimTypes.Name, "刘德华"));
    claimIdentity.AddClaim(new Claim(ClaimTypes.NameIdentifier, "1"));
    claimIdentity.AddClaim(new Claim(ClaimTypes.Sid, "1"));
    claimIdentity.AddClaim(new Claim(ClaimTypes.Role, "1"));
 
    var claimsPrincipal = new ClaimsPrincipal(claimIdentity);

    HttpContext.User = claimsPrincipal;

// 手动刷新
var refreshToken = JWTEncryption.GenerateRefreshToken(output.AccessToken);
var newToken = JWTEncryption.Exchange(output.AccessToken, refreshToken);

// JWT 中配置

/// <summary>
        /// 授权
        /// </summary>
        /// <param name="context"></param>
        /// <returns></returns>
        public override async Task HandleAsync(AuthorizationHandlerContext context)
        {
            if (JWTEncryption.AutoRefreshToken(context, context.GetCurrentHttpContext()))
            {
                await base.AuthorizeHandleAsync(context);
            }
        }