public void ConfigureServices(IServiceCollection services)
{
    // Add service and create Policy with options
    services.AddCors(options =>{});
}

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    if (env.IsDevelopment())
    {
        // Add global cors policy
        app.UseCors(x => x
            .AllowAnyMethod()
            .AllowAnyHeader()
            .SetIsOriginAllowed(origin => true) // allow any origin
            .AllowCredentials()); // allow credentials
    }
}

public void ConfigureServices(IServiceCollection services)
{
    // Add cookie-based authentication
    services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
        .AddCookie()
}

public void ConfigureServices(IServiceCollection services)
{
    // Add cookie-based authentication
    services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
        .AddCookie(options =>
        {
            // Return 401 instead of 302 when accessing resouce without authorization
            // (Default behavior will redirect to login url)
            options.Events.OnRedirectToLogin = context =>
            {
                context.Response.StatusCode = StatusCodes.Status401Unauthorized;
                return Task.CompletedTask;
            };
        });
}

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    // Routing
    app.UseRouting();

    // Authentication
    app.UseAuthentication();
    app.UseAuthorization();
    
    app.UseEndpoints()
}

public void ConfigureServices(IServiceCollection services)
{
    services.AddControllers()
        .ConfigureApiBehaviorOptions(options => {
            //  Format return message from ModelState
            options.InvalidModelStateResponseFactory = actionContext =>
            {
                var modelState = actionContext.ModelState.Values;
                return new BadRequestObjectResult(actionContext.ModelState);
            };
        });
}

[HttpGet]
public bool IsLogin()
{ 
    return User.Identity.IsAuthenticated;
}

[HttpPost]
public async Task<IActionResult> Login([FromBody] AuthenticationUser authenticationUser)
{
    ...

    var claims = new List<Claim>
        {
            // 設定 User 的一些資訊
            new Claim(ClaimTypes.Email, user.Email),
            new Claim(ClaimTypes.Name, user.Name),
            new Claim(ClaimTypes.Role, "Administrator"),
        };

    var claimsIdentity = new ClaimsIdentity(
        claims, CookieAuthenticationDefaults.AuthenticationScheme);

    // 設定 Authentication
    var authProperties = new AuthenticationProperties
    {
        // AllowRefresh = true,
        // Refreshing the authentication session should be allowed.

        // ExpiresUtc = DateTimeOffset.UtcNow.AddMinutes(10),
        // The time at which the authentication ticket expires. A 
        // value set here overrides the ExpireTimeSpan option of 
        // CookieAuthenticationOptions set with AddCookie.

        // IsPersistent = true,
        // Whether the authentication session is persisted across 
        // multiple requests. When used with cookies, controls
        // whether the cookie's lifetime is absolute (matching the
        // lifetime of the authentication ticket) or session-based.

        //IssuedUtc = <DateTimeOffset>,
        // The time at which the authentication ticket was issued.

        //RedirectUri = <string>
        // The full path or absolute URI to be used as an http 
        // redirect response value.
    };

    // 將user登入的資訊寫到session中
    await HttpContext.SignInAsync(
        CookieAuthenticationDefaults.AuthenticationScheme,
        new ClaimsPrincipal(claimsIdentity),
        authProperties);

    return Ok("ok");
}

[HttpPost]
public async Task<IActionResult> Logout()
{
    await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);

    return Ok("ok");
}

[HttpGet]
[Authorize]
public UserInfo GetUserInfo()
{
    var userInfo = new UserInfo(User.Claims.ToList());
    return userInfo;
}

// Models/UserInfo.cs
public class UserInfo
{
    //public List<SimpleClaim> Claims { get; set; } = new List<SimpleClaim>();

    public Dictionary<string, string> Claims { get; set; } = new Dictionary<string, string>();

    public UserInfo(IEnumerable<Claim> claims)
    {
        foreach (var claim in claims)
        {
            string type = claim.Type.Split("/").Last();
            string value = claim.Value;

            this.Claims[type] = value;
        }
    }
}

// Controllers/WeatherForecastController.cs
[HttpGet]
[Authorize]
public IEnumerable<WeatherForecast> Get()