diff --git a/.appveyor.yml b/.appveyor.yml
deleted file mode 100644
index d45bd5a1f..000000000
--- a/.appveyor.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-init:
-- git config --global core.autocrlf true
-branches:
-  only:
-  - master
-  - /^release\/.*$/
-  - /^(.*\/)?ci-.*$/
-build_script:
-- ps: .\run.ps1 default-build
-clone_depth: 1
-environment:
-  global:
-    DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
-    DOTNET_CLI_TELEMETRY_OPTOUT: 1
-test: 'off'
-deploy: 'off'
-os: Visual Studio 2017
diff --git a/.gitattributes b/.gitattributes
deleted file mode 100644
index 97b827b75..000000000
--- a/.gitattributes
+++ /dev/null
@@ -1,51 +0,0 @@
-*.doc  diff=astextplain
-*.DOC	diff=astextplain
-*.docx	diff=astextplain
-*.DOCX	diff=astextplain
-*.dot	diff=astextplain
-*.DOT	diff=astextplain
-*.pdf	diff=astextplain
-*.PDF	diff=astextplain
-*.rtf	diff=astextplain
-*.RTF	diff=astextplain
-
-*.jpg  	binary
-*.png 	binary
-*.gif 	binary
-
-*.cs text=auto diff=csharp 
-*.vb text=auto
-*.resx text=auto
-*.c text=auto
-*.cpp text=auto
-*.cxx text=auto
-*.h text=auto
-*.hxx text=auto
-*.py text=auto
-*.rb text=auto
-*.java text=auto
-*.html text=auto
-*.htm text=auto
-*.css text=auto
-*.scss text=auto
-*.sass text=auto
-*.less text=auto
-*.js text=auto
-*.lisp text=auto
-*.clj text=auto
-*.sql text=auto
-*.php text=auto
-*.lua text=auto
-*.m text=auto
-*.asm text=auto
-*.erl text=auto
-*.fs text=auto
-*.fsx text=auto
-*.hs text=auto
-
-*.csproj text=auto
-*.vbproj text=auto
-*.fsproj text=auto
-*.dbproj text=auto
-*.sln text=auto eol=crlf
-*.sh eol=lf
diff --git a/.gitignore b/.gitignore
deleted file mode 100644
index 3d7e16e84..000000000
--- a/.gitignore
+++ /dev/null
@@ -1,33 +0,0 @@
-[Oo]bj/
-[Bb]in/
-TestResults/
-.nuget/
-_ReSharper.*/
-packages/
-artifacts/
-PublishProfiles/
-*.user
-*.suo
-*.cache
-*.docstates
-_ReSharper.*
-nuget.exe
-*net45.csproj
-*net451.csproj
-*k10.csproj
-*.psess
-*.vsp
-*.pidb
-*.userprefs
-*DS_Store
-*.ncrunchsolution
-*.*sdf
-*.ipch
-*.sln.ide
-project.lock.json
-.build/
-.testPublish/
-/.vs/
-.vscode/
-global.json
-BenchmarkDotNet.Artifacts/
diff --git a/.travis.yml b/.travis.yml
deleted file mode 100644
index ab3980055..000000000
--- a/.travis.yml
+++ /dev/null
@@ -1,27 +0,0 @@
-language: csharp
-sudo: false
-dist: trusty
-env:
-  global:
-  - DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
-  - DOTNET_CLI_TELEMETRY_OPTOUT: 1
-mono: none
-os:
-- linux
-- osx
-osx_image: xcode8.2
-addons:
-  apt:
-    packages:
-    - libunwind8
-branches:
-  only:
-  - master
-  - /^release\/.*$/
-  - /^(.*\/)?ci-.*$/
-before_install:
-- if test "$TRAVIS_OS_NAME" == "osx"; then brew update; brew install openssl; ln -s
-  /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib /usr/local/lib/; ln -s /usr/local/opt/openssl/lib/libssl.1.0.0.dylib
-  /usr/local/lib/; fi
-script:
-- ./build.sh
diff --git a/.vsts-pipelines/builds/ci-internal.yml b/.vsts-pipelines/builds/ci-internal.yml
deleted file mode 100644
index c2c5336fd..000000000
--- a/.vsts-pipelines/builds/ci-internal.yml
+++ /dev/null
@@ -1,13 +0,0 @@
-trigger:
-- master
-- release/*
-
-resources:
-  repositories:
-  - repository: buildtools
-    type: git
-    name: aspnet-BuildTools
-    ref: refs/heads/master
-
-phases:
-- template: .vsts-pipelines/templates/project-ci.yml@buildtools
diff --git a/.vsts-pipelines/builds/ci-public.yml b/.vsts-pipelines/builds/ci-public.yml
deleted file mode 100644
index 507c89b02..000000000
--- a/.vsts-pipelines/builds/ci-public.yml
+++ /dev/null
@@ -1,15 +0,0 @@
-trigger:
-- master
-- release/*
-
-# See https://github.com/aspnet/BuildTools
-resources:
-  repositories:
-  - repository: buildtools
-    type: github
-    endpoint: DotNet-Bot GitHub Connection
-    name: aspnet/BuildTools
-    ref: refs/heads/master
-
-phases:
-- template: .vsts-pipelines/templates/project-ci.yml@buildtools
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
deleted file mode 100644
index eac4268e4..000000000
--- a/CONTRIBUTING.md
+++ /dev/null
@@ -1,4 +0,0 @@
-Contributing
-======
-
-Information on contributing to this repo is in the [Contributing Guide](https://github.com/aspnet/Home/blob/master/CONTRIBUTING.md) in the Home repo.
diff --git a/Directory.Build.props b/Directory.Build.props
deleted file mode 100644
index eb9d9535e..000000000
--- a/Directory.Build.props
+++ /dev/null
@@ -1,19 +0,0 @@
-<Project>
-  <Import
-    Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildThisFileDirectory), AspNetCoreSettings.props))\AspNetCoreSettings.props"
-    Condition=" '$(CI)' != 'true' AND '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildThisFileDirectory), AspNetCoreSettings.props))' != '' " />
-
-  <Import Project="version.props" />
-  <Import Project="build\dependencies.props" />
-  <Import Project="build\sources.props" />
-
-  <PropertyGroup>
-    <Product>Microsoft ASP.NET Core</Product>
-    <RepositoryUrl>https://github.com/aspnet/Security</RepositoryUrl>
-    <RepositoryType>git</RepositoryType>
-    <RepositoryRoot>$(MSBuildThisFileDirectory)</RepositoryRoot>
-    <AssemblyOriginatorKeyFile>$(MSBuildThisFileDirectory)build\Key.snk</AssemblyOriginatorKeyFile>
-    <SignAssembly>true</SignAssembly>
-    <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
-  </PropertyGroup>
-</Project>
diff --git a/Directory.Build.targets b/Directory.Build.targets
deleted file mode 100644
index 7e3f8df92..000000000
--- a/Directory.Build.targets
+++ /dev/null
@@ -1,6 +0,0 @@
-<Project>
-  <PropertyGroup>
-    <RuntimeFrameworkVersion Condition=" '$(TargetFramework)' == 'netcoreapp3.0' ">$(MicrosoftNETCoreAppPackageVersion)</RuntimeFrameworkVersion>
-    <NETStandardImplicitPackageVersion Condition=" '$(TargetFramework)' == 'netstandard2.0' ">$(NETStandardLibrary20PackageVersion)</NETStandardImplicitPackageVersion>
-  </PropertyGroup>
-</Project>
diff --git a/LICENSE.txt b/LICENSE.txt
deleted file mode 100644
index b3b180cd5..000000000
--- a/LICENSE.txt
+++ /dev/null
@@ -1,201 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright (c) .NET Foundation and Contributors
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
diff --git a/NuGet.config b/NuGet.config
deleted file mode 100644
index e32bddfd5..000000000
--- a/NuGet.config
+++ /dev/null
@@ -1,7 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<configuration>
-  <packageSources>
-    <clear />
-    <!-- Restore sources should be defined in build/sources.props. -->
-  </packageSources>
-</configuration>
diff --git a/NuGetPackageVerifier.json b/NuGetPackageVerifier.json
deleted file mode 100644
index 974eb365c..000000000
--- a/NuGetPackageVerifier.json
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-  "adx-nonshipping": {
-    "rules": [],
-    "packages": {
-      "Microsoft.AspNetCore.ChunkingCookieManager.Sources": {}
-    }
-  },
-  "Default": {
-    "rules": [
-      "DefaultCompositeRule"
-    ]
-  }
-}
\ No newline at end of file
diff --git a/README.md b/README.md
deleted file mode 100644
index 66c2aa45e..000000000
--- a/README.md
+++ /dev/null
@@ -1,15 +0,0 @@
-ASP.NET Security [Archived]
-===========================
-
-**This GitHub project has been archived.** Ongoing development on this project can be found in <https://github.com/aspnet/AspNetCore>.
-
-Contains the security and authorization middlewares for ASP.NET Core.
-
-A list of community projects related to authentication and security for ASP.NET Core are listed in the [documentation](https://docs.microsoft.com/en-us/aspnet/core/security/authentication/community).
-
-### Notes
-
-ASP.NET Security will not include Basic Authentication middleware due to its potential insecurity and performance problems. If you host under IIS you can enable it via IIS configuration.
-
-
-This project is part of ASP.NET Core. You can find samples, documentation and getting started instructions for ASP.NET Core at the [AspNetCore](https://github.com/aspnet/AspNetCore) repo.
diff --git a/Security.sln b/Security.sln
deleted file mode 100644
index 240100e8c..000000000
--- a/Security.sln
+++ /dev/null
@@ -1,577 +0,0 @@
-Microsoft Visual Studio Solution File, Format Version 12.00
-# Visual Studio 15
-VisualStudioVersion = 15.0.27130.2027
-MinimumVisualStudioVersion = 15.0.26730.03
-Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "src", "src", "{4D2B6A51-2F9F-44F5-8131-EA5CAC053652}"
-	ProjectSection(SolutionItems) = preProject
-		src\Directory.Build.props = src\Directory.Build.props
-	EndProjectSection
-EndProject
-Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "samples", "samples", "{F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "CookieSample", "samples\CookieSample\CookieSample.csproj", "{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}"
-EndProject
-Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "test", "test", "{7BF11F3A-60B6-4796-B504-579C67FFBA34}"
-	ProjectSection(SolutionItems) = preProject
-		test\Directory.Build.props = test\Directory.Build.props
-	EndProjectSection
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "SocialSample", "samples\SocialSample\SocialSample.csproj", "{8C73D216-332D-41D8-BFD0-45BC4BC36552}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "CookieSessionSample", "samples\CookieSessionSample\CookieSessionSample.csproj", "{19711880-46DA-4A26-9E0F-9B2E41D27651}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "OpenIdConnectSample", "samples\OpenIdConnectSample\OpenIdConnectSample.csproj", "{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.Cookies", "src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj", "{FC152CC4-054B-457E-8D91-389C5DE3C561}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication", "src\Microsoft.AspNetCore.Authentication\Microsoft.AspNetCore.Authentication.csproj", "{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.Facebook", "src\Microsoft.AspNetCore.Authentication.Facebook\Microsoft.AspNetCore.Authentication.Facebook.csproj", "{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.Google", "src\Microsoft.AspNetCore.Authentication.Google\Microsoft.AspNetCore.Authentication.Google.csproj", "{76579C39-B829-490D-B8BE-1BD35FE8412E}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.OpenIdConnect", "src\Microsoft.AspNetCore.Authentication.OpenIdConnect\Microsoft.AspNetCore.Authentication.OpenIdConnect.csproj", "{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.MicrosoftAccount", "src\Microsoft.AspNetCore.Authentication.MicrosoftAccount\Microsoft.AspNetCore.Authentication.MicrosoftAccount.csproj", "{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.Twitter", "src\Microsoft.AspNetCore.Authentication.Twitter\Microsoft.AspNetCore.Authentication.Twitter.csproj", "{0330FFF6-B4B5-42DD-8C99-26A789569000}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.OAuth", "src\Microsoft.AspNetCore.Authentication.OAuth\Microsoft.AspNetCore.Authentication.OAuth.csproj", "{1657C79E-7755-4AEE-9D61-571295B69A30}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.Test", "test\Microsoft.AspNetCore.Authentication.Test\Microsoft.AspNetCore.Authentication.Test.csproj", "{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authorization.Test", "test\Microsoft.AspNetCore.Authorization.Test\Microsoft.AspNetCore.Authorization.Test.csproj", "{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authorization", "src\Microsoft.AspNetCore.Authorization\Microsoft.AspNetCore.Authorization.csproj", "{6AB3E514-5894-4131-9399-DC7D5284ADDB}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.CookiePolicy", "src\Microsoft.AspNetCore.CookiePolicy\Microsoft.AspNetCore.CookiePolicy.csproj", "{86183DC3-02A8-4A68-8B60-71ECEC066E79}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.CookiePolicy.Test", "test\Microsoft.AspNetCore.CookiePolicy.Test\Microsoft.AspNetCore.CookiePolicy.Test.csproj", "{1790E052-646F-4529-B90E-6FEA95520D69}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.JwtBearer", "src\Microsoft.AspNetCore.Authentication.JwtBearer\Microsoft.AspNetCore.Authentication.JwtBearer.csproj", "{2755BFE5-7421-4A31-A644-F817DF5CAA98}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "JwtBearerSample", "samples\JwtBearerSample\JwtBearerSample.csproj", "{D399B84F-591B-4E98-92BA-B0F63E7B6957}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.Owin.Security.Interop", "src\Microsoft.Owin.Security.Interop\Microsoft.Owin.Security.Interop.csproj", "{A7922DD8-09F1-43E4-938B-CC523EA08898}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.Owin.Security.Interop.Test", "test\Microsoft.Owin.Security.Interop.Test\Microsoft.Owin.Security.Interop.Test.csproj", "{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "OpenIdConnect.AzureAdSample", "samples\OpenIdConnect.AzureAdSample\OpenIdConnect.AzureAdSample.csproj", "{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test", "test\Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test\Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test.csproj", "{51563775-C659-4907-9BAF-9995BAB87D01}"
-EndProject
-Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "Solution Items", "Solution Items", "{86BD08B1-F978-4F58-9982-2A017807F01C}"
-	ProjectSection(SolutionItems) = preProject
-		build\dependencies.props = build\dependencies.props
-		Directory.Build.props = Directory.Build.props
-		Directory.Build.targets = Directory.Build.targets
-		build\Key.snk = build\Key.snk
-		NuGet.config = NuGet.config
-		build\repo.props = build\repo.props
-		build\sources.props = build\sources.props
-	EndProjectSection
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authorization.Policy", "src\Microsoft.AspNetCore.Authorization.Policy\Microsoft.AspNetCore.Authorization.Policy.csproj", "{58194599-F07D-47A3-9DF2-E21A22C5EF9E}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "CookiePolicySample", "samples\CookiePolicySample\CookiePolicySample.csproj", "{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Authentication.WsFederation", "src\Microsoft.AspNetCore.Authentication.WsFederation\Microsoft.AspNetCore.Authentication.WsFederation.csproj", "{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "WsFedSample", "samples\WsFedSample\WsFedSample.csproj", "{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}"
-EndProject
-Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "benchmarks", "benchmarks", "{55052FE3-F8C2-4E6C-97B0-C02ED1DBEA62}"
-EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Microsoft.AspNetCore.Security.Performance", "benchmarks\Microsoft.AspNetCore.Security.Performance\Microsoft.AspNetCore.Security.Performance.csproj", "{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}"
-EndProject
-Global
-	GlobalSection(SolutionConfigurationPlatforms) = preSolution
-		Debug|Any CPU = Debug|Any CPU
-		Debug|Mixed Platforms = Debug|Mixed Platforms
-		Debug|x64 = Debug|x64
-		Debug|x86 = Debug|x86
-		Release|Any CPU = Release|Any CPU
-		Release|Mixed Platforms = Release|Mixed Platforms
-		Release|x64 = Release|x64
-		Release|x86 = Release|x86
-	EndGlobalSection
-	GlobalSection(ProjectConfigurationPlatforms) = postSolution
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Debug|x64.Build.0 = Debug|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Release|Any CPU.Build.0 = Release|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Release|x64.ActiveCfg = Release|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Release|x64.Build.0 = Release|Any CPU
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714}.Release|x86.ActiveCfg = Release|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Debug|x64.Build.0 = Debug|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Release|Any CPU.Build.0 = Release|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Release|x64.ActiveCfg = Release|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Release|x64.Build.0 = Release|Any CPU
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552}.Release|x86.ActiveCfg = Release|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Debug|x64.Build.0 = Debug|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Release|Any CPU.Build.0 = Release|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Release|x64.ActiveCfg = Release|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Release|x64.Build.0 = Release|Any CPU
-		{19711880-46DA-4A26-9E0F-9B2E41D27651}.Release|x86.ActiveCfg = Release|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Debug|x64.Build.0 = Debug|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Debug|x86.Build.0 = Debug|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Release|Any CPU.Build.0 = Release|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Release|x64.ActiveCfg = Release|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Release|x64.Build.0 = Release|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Release|x86.ActiveCfg = Release|Any CPU
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B}.Release|x86.Build.0 = Release|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Debug|x64.Build.0 = Debug|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Debug|x86.Build.0 = Debug|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Release|Any CPU.Build.0 = Release|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Release|x64.ActiveCfg = Release|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Release|x64.Build.0 = Release|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Release|x86.ActiveCfg = Release|Any CPU
-		{FC152CC4-054B-457E-8D91-389C5DE3C561}.Release|x86.Build.0 = Release|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Debug|x64.Build.0 = Debug|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Debug|x86.Build.0 = Debug|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Release|Any CPU.Build.0 = Release|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Release|x64.ActiveCfg = Release|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Release|x64.Build.0 = Release|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Release|x86.ActiveCfg = Release|Any CPU
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB}.Release|x86.Build.0 = Release|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Debug|x64.Build.0 = Debug|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Debug|x86.Build.0 = Debug|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Release|Any CPU.Build.0 = Release|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Release|x64.ActiveCfg = Release|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Release|x64.Build.0 = Release|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Release|x86.ActiveCfg = Release|Any CPU
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A}.Release|x86.Build.0 = Release|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Debug|x64.Build.0 = Debug|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Debug|x86.Build.0 = Debug|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Release|Any CPU.Build.0 = Release|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Release|x64.ActiveCfg = Release|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Release|x64.Build.0 = Release|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Release|x86.ActiveCfg = Release|Any CPU
-		{76579C39-B829-490D-B8BE-1BD35FE8412E}.Release|x86.Build.0 = Release|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Debug|x64.Build.0 = Debug|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Debug|x86.Build.0 = Debug|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Release|Any CPU.Build.0 = Release|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Release|x64.ActiveCfg = Release|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Release|x64.Build.0 = Release|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Release|x86.ActiveCfg = Release|Any CPU
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A}.Release|x86.Build.0 = Release|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Debug|x64.Build.0 = Debug|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Debug|x86.Build.0 = Debug|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Release|Any CPU.Build.0 = Release|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Release|x64.ActiveCfg = Release|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Release|x64.Build.0 = Release|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Release|x86.ActiveCfg = Release|Any CPU
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE}.Release|x86.Build.0 = Release|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Debug|x64.Build.0 = Debug|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Debug|x86.Build.0 = Debug|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Release|Any CPU.Build.0 = Release|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Release|x64.ActiveCfg = Release|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Release|x64.Build.0 = Release|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Release|x86.ActiveCfg = Release|Any CPU
-		{0330FFF6-B4B5-42DD-8C99-26A789569000}.Release|x86.Build.0 = Release|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Debug|x64.Build.0 = Debug|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Debug|x86.Build.0 = Debug|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Release|Any CPU.Build.0 = Release|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Release|x64.ActiveCfg = Release|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Release|x64.Build.0 = Release|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Release|x86.ActiveCfg = Release|Any CPU
-		{1657C79E-7755-4AEE-9D61-571295B69A30}.Release|x86.Build.0 = Release|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Debug|x64.Build.0 = Debug|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Debug|x86.Build.0 = Debug|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Release|Any CPU.Build.0 = Release|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Release|x64.ActiveCfg = Release|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Release|x64.Build.0 = Release|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Release|x86.ActiveCfg = Release|Any CPU
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B}.Release|x86.Build.0 = Release|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Debug|x64.Build.0 = Debug|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Debug|x86.Build.0 = Debug|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Release|Any CPU.Build.0 = Release|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Release|x64.ActiveCfg = Release|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Release|x64.Build.0 = Release|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Release|x86.ActiveCfg = Release|Any CPU
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2}.Release|x86.Build.0 = Release|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Debug|x64.Build.0 = Debug|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Debug|x86.Build.0 = Debug|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Release|Any CPU.Build.0 = Release|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Release|x64.ActiveCfg = Release|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Release|x64.Build.0 = Release|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Release|x86.ActiveCfg = Release|Any CPU
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB}.Release|x86.Build.0 = Release|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Debug|x64.Build.0 = Debug|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Debug|x86.Build.0 = Debug|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Release|Any CPU.Build.0 = Release|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Release|x64.ActiveCfg = Release|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Release|x64.Build.0 = Release|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Release|x86.ActiveCfg = Release|Any CPU
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79}.Release|x86.Build.0 = Release|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Debug|x64.Build.0 = Debug|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Debug|x86.Build.0 = Debug|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Release|Any CPU.Build.0 = Release|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Release|x64.ActiveCfg = Release|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Release|x64.Build.0 = Release|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Release|x86.ActiveCfg = Release|Any CPU
-		{1790E052-646F-4529-B90E-6FEA95520D69}.Release|x86.Build.0 = Release|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Debug|x64.Build.0 = Debug|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Debug|x86.Build.0 = Debug|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Release|Any CPU.Build.0 = Release|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Release|x64.ActiveCfg = Release|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Release|x64.Build.0 = Release|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Release|x86.ActiveCfg = Release|Any CPU
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98}.Release|x86.Build.0 = Release|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Debug|x64.Build.0 = Debug|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Debug|x86.Build.0 = Debug|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Release|Any CPU.Build.0 = Release|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Release|x64.ActiveCfg = Release|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Release|x64.Build.0 = Release|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Release|x86.ActiveCfg = Release|Any CPU
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957}.Release|x86.Build.0 = Release|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Debug|x64.Build.0 = Debug|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Debug|x86.Build.0 = Debug|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Release|Any CPU.Build.0 = Release|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Release|x64.ActiveCfg = Release|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Release|x64.Build.0 = Release|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Release|x86.ActiveCfg = Release|Any CPU
-		{A7922DD8-09F1-43E4-938B-CC523EA08898}.Release|x86.Build.0 = Release|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Debug|x64.Build.0 = Debug|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Debug|x86.Build.0 = Debug|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Release|Any CPU.Build.0 = Release|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Release|x64.ActiveCfg = Release|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Release|x64.Build.0 = Release|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Release|x86.ActiveCfg = Release|Any CPU
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24}.Release|x86.Build.0 = Release|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Debug|x64.Build.0 = Debug|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Debug|x86.Build.0 = Debug|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Release|Any CPU.Build.0 = Release|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Release|x64.ActiveCfg = Release|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Release|x64.Build.0 = Release|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Release|x86.ActiveCfg = Release|Any CPU
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E}.Release|x86.Build.0 = Release|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Debug|x64.Build.0 = Debug|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Debug|x86.Build.0 = Debug|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Release|Any CPU.Build.0 = Release|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Release|x64.ActiveCfg = Release|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Release|x64.Build.0 = Release|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Release|x86.ActiveCfg = Release|Any CPU
-		{51563775-C659-4907-9BAF-9995BAB87D01}.Release|x86.Build.0 = Release|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Debug|x64.Build.0 = Debug|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Debug|x86.Build.0 = Debug|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Release|Any CPU.Build.0 = Release|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Release|x64.ActiveCfg = Release|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Release|x64.Build.0 = Release|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Release|x86.ActiveCfg = Release|Any CPU
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E}.Release|x86.Build.0 = Release|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Debug|x64.Build.0 = Debug|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Debug|x86.Build.0 = Debug|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Release|Any CPU.Build.0 = Release|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Release|x64.ActiveCfg = Release|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Release|x64.Build.0 = Release|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Release|x86.ActiveCfg = Release|Any CPU
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E}.Release|x86.Build.0 = Release|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Debug|x64.Build.0 = Debug|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Debug|x86.Build.0 = Debug|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Release|Any CPU.Build.0 = Release|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Release|x64.ActiveCfg = Release|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Release|x64.Build.0 = Release|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Release|x86.ActiveCfg = Release|Any CPU
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29}.Release|x86.Build.0 = Release|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Debug|x64.Build.0 = Debug|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Debug|x86.Build.0 = Debug|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Release|Any CPU.Build.0 = Release|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Release|x64.ActiveCfg = Release|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Release|x64.Build.0 = Release|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Release|x86.ActiveCfg = Release|Any CPU
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800}.Release|x86.Build.0 = Release|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Debug|x64.Build.0 = Debug|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Debug|x86.Build.0 = Debug|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Release|Any CPU.Build.0 = Release|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Release|Mixed Platforms.Build.0 = Release|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Release|x64.ActiveCfg = Release|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Release|x64.Build.0 = Release|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Release|x86.ActiveCfg = Release|Any CPU
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A}.Release|x86.Build.0 = Release|Any CPU
-	EndGlobalSection
-	GlobalSection(SolutionProperties) = preSolution
-		HideSolutionNode = FALSE
-	EndGlobalSection
-	GlobalSection(NestedProjects) = preSolution
-		{558C2C2A-AED8-49DE-BB60-D5F8AE06C714} = {F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}
-		{8C73D216-332D-41D8-BFD0-45BC4BC36552} = {F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}
-		{19711880-46DA-4A26-9E0F-9B2E41D27651} = {F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}
-		{BEF0F5C3-EF4E-4649-9C49-D5E279A3CA2B} = {F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}
-		{FC152CC4-054B-457E-8D91-389C5DE3C561} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{BC0D4B56-1A5B-4D88-AFBF-68C0F2D545FB} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{EEAAEE68-607B-4E33-AF3E-45C66B4DBA5A} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{76579C39-B829-490D-B8BE-1BD35FE8412E} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{35115D55-B69E-46D4-BB33-C9E9E6EC5E7A} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{ACB45E19-F520-4D0C-8916-B0CEB9C017FE} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{0330FFF6-B4B5-42DD-8C99-26A789569000} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{1657C79E-7755-4AEE-9D61-571295B69A30} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{8DA26CD1-1302-4CFD-9270-9FA1B7C6138B} = {7BF11F3A-60B6-4796-B504-579C67FFBA34}
-		{7AF5AD96-EB6E-4D0E-8ABE-C0B543C0F4C2} = {7BF11F3A-60B6-4796-B504-579C67FFBA34}
-		{6AB3E514-5894-4131-9399-DC7D5284ADDB} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{86183DC3-02A8-4A68-8B60-71ECEC066E79} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{1790E052-646F-4529-B90E-6FEA95520D69} = {7BF11F3A-60B6-4796-B504-579C67FFBA34}
-		{2755BFE5-7421-4A31-A644-F817DF5CAA98} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{D399B84F-591B-4E98-92BA-B0F63E7B6957} = {F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}
-		{A7922DD8-09F1-43E4-938B-CC523EA08898} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{A2B5DC39-68D5-4145-A8CC-6AEAB7D33A24} = {7BF11F3A-60B6-4796-B504-579C67FFBA34}
-		{3A7AD414-EBDE-4F92-B307-4E8F19B6117E} = {F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}
-		{51563775-C659-4907-9BAF-9995BAB87D01} = {7BF11F3A-60B6-4796-B504-579C67FFBA34}
-		{58194599-F07D-47A3-9DF2-E21A22C5EF9E} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{24A28F5D-E5A9-4CA8-B0D2-924A1F8BE14E} = {F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}
-		{B1FC6AAF-9BF2-4CDA-84A2-AA8BF7603F29} = {4D2B6A51-2F9F-44F5-8131-EA5CAC053652}
-		{5EC2E398-E46A-430D-8E4B-E91C8FC3E800} = {F8C0AA27-F3FB-4286-8E4C-47EF86B539FF}
-		{556C4FAA-F4B1-4EA9-8921-CB1DF7D94C2A} = {55052FE3-F8C2-4E6C-97B0-C02ED1DBEA62}
-	EndGlobalSection
-	GlobalSection(ExtensibilityGlobals) = postSolution
-		SolutionGuid = {ABF8089E-43D0-4010-84A7-7A9DCFE49357}
-	EndGlobalSection
-EndGlobal
diff --git a/benchmarks/Microsoft.AspNetCore.Security.Performance/AuthorizationMiddlewareBenchmark.cs b/benchmarks/Microsoft.AspNetCore.Security.Performance/AuthorizationMiddlewareBenchmark.cs
deleted file mode 100644
index 90cb135de..000000000
--- a/benchmarks/Microsoft.AspNetCore.Security.Performance/AuthorizationMiddlewareBenchmark.cs
+++ /dev/null
@@ -1,53 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-using BenchmarkDotNet.Attributes;
-using Microsoft.AspNetCore.Authorization;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Security
-{
-    public class AuthorizationMiddlewareBenchmark
-    {
-        private AuthorizationMiddleware _authorizationMiddleware;
-        private DefaultHttpContext _httpContextNoEndpoint;
-        private DefaultHttpContext _httpContextHasEndpoint;
-
-        [GlobalSetup]
-        public void Setup()
-        {
-            var policyProvider = new DefaultAuthorizationPolicyProvider(Options.Create(new AuthorizationOptions()));
-            _authorizationMiddleware = new AuthorizationMiddleware((context) => Task.CompletedTask, policyProvider);
-
-            _httpContextNoEndpoint = new DefaultHttpContext();
-
-            var feature = new EndpointFeature
-            {
-                Endpoint = new Endpoint((context) => Task.CompletedTask, EndpointMetadataCollection.Empty, "Test endpoint")
-            };
-            _httpContextHasEndpoint = new DefaultHttpContext();
-            _httpContextHasEndpoint.Features.Set<IEndpointFeature>(feature);
-        }
-
-        [Benchmark]
-        public Task Invoke_NoEndpoint_NoAuthorization()
-        {
-            return _authorizationMiddleware.Invoke(_httpContextNoEndpoint);
-        }
-
-        [Benchmark]
-        public Task Invoke_HasEndpoint_NoAuthorization()
-        {
-            return _authorizationMiddleware.Invoke(_httpContextHasEndpoint);
-        }
-
-        private class EndpointFeature : IEndpointFeature
-        {
-            public Endpoint Endpoint { get; set; }
-        }
-    }
-}
diff --git a/benchmarks/Microsoft.AspNetCore.Security.Performance/AuthorizationPolicyBenchmark.cs b/benchmarks/Microsoft.AspNetCore.Security.Performance/AuthorizationPolicyBenchmark.cs
deleted file mode 100644
index 86afdcd5a..000000000
--- a/benchmarks/Microsoft.AspNetCore.Security.Performance/AuthorizationPolicyBenchmark.cs
+++ /dev/null
@@ -1,28 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-using BenchmarkDotNet.Attributes;
-using Microsoft.AspNetCore.Authorization;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Security
-{
-    public class AuthorizationPolicyBenchmark
-    {
-        private DefaultAuthorizationPolicyProvider _policyProvider;
-
-        [GlobalSetup]
-        public void Setup()
-        {
-            _policyProvider = new DefaultAuthorizationPolicyProvider(Options.Create(new AuthorizationOptions()));
-        }
-
-        [Benchmark]
-        public Task CombineAsync()
-        {
-            return AuthorizationPolicy.CombineAsync(_policyProvider, Array.Empty<IAuthorizeData>());
-        }
-    }
-}
diff --git a/benchmarks/Microsoft.AspNetCore.Security.Performance/Microsoft.AspNetCore.Security.Performance.csproj b/benchmarks/Microsoft.AspNetCore.Security.Performance/Microsoft.AspNetCore.Security.Performance.csproj
deleted file mode 100644
index 2f16dd669..000000000
--- a/benchmarks/Microsoft.AspNetCore.Security.Performance/Microsoft.AspNetCore.Security.Performance.csproj
+++ /dev/null
@@ -1,24 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <OutputType>Exe</OutputType>
-    <ServerGarbageCollection>true</ServerGarbageCollection>
-    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
-    <IsPackable>false</IsPackable>
-    <RootNamespace>Microsoft.AspNetCore.Security</RootNamespace>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authorization.Policy\Microsoft.AspNetCore.Authorization.Policy.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="BenchmarkDotNet" Version="$(BenchmarkDotNetPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.BenchmarkRunner.Sources" PrivateAssets="All" Version="$(MicrosoftAspNetCoreBenchmarkRunnerSourcesPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Http" Version="$(MicrosoftAspNetCoreHttpPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="$(MicrosoftExtensionsDependencyInjectionPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging" Version="$(MicrosoftExtensionsLoggingPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/benchmarks/Microsoft.AspNetCore.Security.Performance/Properties/AssemblyInfo.cs b/benchmarks/Microsoft.AspNetCore.Security.Performance/Properties/AssemblyInfo.cs
deleted file mode 100644
index cfb0b19c2..000000000
--- a/benchmarks/Microsoft.AspNetCore.Security.Performance/Properties/AssemblyInfo.cs
+++ /dev/null
@@ -1 +0,0 @@
-[assembly: BenchmarkDotNet.Attributes.AspNetCoreBenchmark]
\ No newline at end of file
diff --git a/benchmarks/Microsoft.AspNetCore.Security.Performance/readme.md b/benchmarks/Microsoft.AspNetCore.Security.Performance/readme.md
deleted file mode 100644
index cbe60261b..000000000
--- a/benchmarks/Microsoft.AspNetCore.Security.Performance/readme.md
+++ /dev/null
@@ -1,16 +0,0 @@
-Compile the solution in Release mode (so binaries are available in release)
-
-To run a specific benchmark add it as parameter.
-```
-dotnet run -c Release --framework <tfm> <benchmark_name>
-```
-
-To run all benchmarks use '*' as the name.
-```
-dotnet run -c Release --framework <tfm> *
-```
-
-If you run without any parameters, you'll be offered the list of all benchmarks and get to choose.
-```
-dotnet run -c Release --framework <tfm> 
-```
\ No newline at end of file
diff --git a/build.cmd b/build.cmd
deleted file mode 100644
index c0050bda1..000000000
--- a/build.cmd
+++ /dev/null
@@ -1,2 +0,0 @@
-@ECHO OFF
-PowerShell -NoProfile -NoLogo -ExecutionPolicy unrestricted -Command "[System.Threading.Thread]::CurrentThread.CurrentCulture = ''; [System.Threading.Thread]::CurrentThread.CurrentUICulture = '';& '%~dp0run.ps1' default-build %*; exit $LASTEXITCODE"
diff --git a/build.sh b/build.sh
deleted file mode 100755
index 98a4b2276..000000000
--- a/build.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/usr/bin/env bash
-
-set -euo pipefail
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-
-# Call "sync" between "chmod" and execution to prevent "text file busy" error in Docker (aufs)
-chmod +x "$DIR/run.sh"; sync
-"$DIR/run.sh" default-build "$@"
diff --git a/build/Key.snk b/build/Key.snk
deleted file mode 100644
index e10e4889c..000000000
Binary files a/build/Key.snk and /dev/null differ
diff --git a/build/dependencies.props b/build/dependencies.props
deleted file mode 100644
index 163a3d400..000000000
--- a/build/dependencies.props
+++ /dev/null
@@ -1,56 +0,0 @@
-<Project>
-  <PropertyGroup>
-    <MSBuildAllProjects>$(MSBuildAllProjects);$(MSBuildThisFileFullPath)</MSBuildAllProjects>
-  </PropertyGroup>
-  <PropertyGroup Label="Package Versions">
-    <BenchmarkDotNetPackageVersion>0.10.13</BenchmarkDotNetPackageVersion>
-    <InternalAspNetCoreSdkPackageVersion>3.0.0-build-20181114.5</InternalAspNetCoreSdkPackageVersion>
-    <MicrosoftAspNetCoreAuthenticationAbstractionsPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreAuthenticationAbstractionsPackageVersion>
-    <MicrosoftAspNetCoreAuthenticationCorePackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreAuthenticationCorePackageVersion>
-    <MicrosoftAspNetCoreBenchmarkRunnerSourcesPackageVersion>3.0.0-preview-181113-11</MicrosoftAspNetCoreBenchmarkRunnerSourcesPackageVersion>
-    <MicrosoftAspNetCoreDataProtectionExtensionsPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreDataProtectionExtensionsPackageVersion>
-    <MicrosoftAspNetCoreDataProtectionPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreDataProtectionPackageVersion>
-    <MicrosoftAspNetCoreDiagnosticsPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreDiagnosticsPackageVersion>
-    <MicrosoftAspNetCoreHostingPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreHostingPackageVersion>
-    <MicrosoftAspNetCoreHttpAbstractionsPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreHttpAbstractionsPackageVersion>
-    <MicrosoftAspNetCoreHttpExtensionsPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreHttpExtensionsPackageVersion>
-    <MicrosoftAspNetCoreHttpPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreHttpPackageVersion>
-    <MicrosoftAspNetCoreRoutingPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreRoutingPackageVersion>
-    <MicrosoftAspNetCoreServerIISIntegrationPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreServerIISIntegrationPackageVersion>
-    <MicrosoftAspNetCoreServerKestrelHttpsPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreServerKestrelHttpsPackageVersion>
-    <MicrosoftAspNetCoreServerKestrelPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreServerKestrelPackageVersion>
-    <MicrosoftAspNetCoreStaticFilesPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreStaticFilesPackageVersion>
-    <MicrosoftAspNetCoreTestHostPackageVersion>3.0.0-alpha1-10742</MicrosoftAspNetCoreTestHostPackageVersion>
-    <MicrosoftAspNetCoreTestingPackageVersion>3.0.0-preview-181113-11</MicrosoftAspNetCoreTestingPackageVersion>
-    <MicrosoftExtensionsCachingMemoryPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsCachingMemoryPackageVersion>
-    <MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion>
-    <MicrosoftExtensionsConfigurationUserSecretsPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsConfigurationUserSecretsPackageVersion>
-    <MicrosoftExtensionsDependencyInjectionPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsDependencyInjectionPackageVersion>
-    <MicrosoftExtensionsFileProvidersEmbeddedPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsFileProvidersEmbeddedPackageVersion>
-    <MicrosoftExtensionsLoggingAbstractionsPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsLoggingAbstractionsPackageVersion>
-    <MicrosoftExtensionsLoggingConsolePackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsLoggingConsolePackageVersion>
-    <MicrosoftExtensionsLoggingDebugPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsLoggingDebugPackageVersion>
-    <MicrosoftExtensionsLoggingPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsLoggingPackageVersion>
-    <MicrosoftExtensionsOptionsPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsOptionsPackageVersion>
-    <MicrosoftExtensionsSecurityHelperSourcesPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsSecurityHelperSourcesPackageVersion>
-    <MicrosoftExtensionsWebEncodersPackageVersion>3.0.0-preview-181113-11</MicrosoftExtensionsWebEncodersPackageVersion>
-    <MicrosoftIdentityModelClientsActiveDirectoryPackageVersion>3.19.8</MicrosoftIdentityModelClientsActiveDirectoryPackageVersion>
-    <MicrosoftIdentityModelProtocolsOpenIdConnectPackageVersion>5.3.0</MicrosoftIdentityModelProtocolsOpenIdConnectPackageVersion>
-    <MicrosoftIdentityModelProtocolsWsFederationPackageVersion>5.3.0</MicrosoftIdentityModelProtocolsWsFederationPackageVersion>
-    <MicrosoftNETCoreAppPackageVersion>3.0.0-preview1-26907-05</MicrosoftNETCoreAppPackageVersion>
-    <MicrosoftNETTestSdkPackageVersion>15.6.1</MicrosoftNETTestSdkPackageVersion>
-    <MicrosoftOwinSecurityCookiesPackageVersion>3.0.1</MicrosoftOwinSecurityCookiesPackageVersion>
-    <MicrosoftOwinSecurityPackageVersion>3.0.1</MicrosoftOwinSecurityPackageVersion>
-    <MicrosoftOwinTestingPackageVersion>3.0.1</MicrosoftOwinTestingPackageVersion>
-    <MoqPackageVersion>4.10.0</MoqPackageVersion>
-    <NETStandardLibrary20PackageVersion>2.0.3</NETStandardLibrary20PackageVersion>
-    <NewtonsoftJsonPackageVersion>11.0.2</NewtonsoftJsonPackageVersion>
-    <SystemIdentityModelTokensJwtPackageVersion>5.3.0</SystemIdentityModelTokensJwtPackageVersion>
-    <XunitAnalyzersPackageVersion>0.10.0</XunitAnalyzersPackageVersion>
-    <XunitPackageVersion>2.3.1</XunitPackageVersion>
-    <XunitRunnerVisualStudioPackageVersion>2.4.0</XunitRunnerVisualStudioPackageVersion>
-  </PropertyGroup>
-  <PropertyGroup Label="Package Versions: Pinned" />
-  <Import Project="$(DotNetPackageVersionPropsPath)" Condition=" '$(DotNetPackageVersionPropsPath)' != '' " />
-  <PropertyGroup Label="Package Versions: Pinned" />
-</Project>
diff --git a/build/sources.props b/build/sources.props
deleted file mode 100644
index 9215df975..000000000
--- a/build/sources.props
+++ /dev/null
@@ -1,17 +0,0 @@
-<Project>
-  <Import Project="$(DotNetRestoreSourcePropsPath)" Condition="'$(DotNetRestoreSourcePropsPath)' != ''"/>
-
-  <PropertyGroup Label="RestoreSources">
-    <RestoreSources>$(DotNetRestoreSources)</RestoreSources>
-    <RestoreSources Condition="'$(DotNetBuildOffline)' != 'true' AND '$(AspNetUniverseBuildOffline)' != 'true' ">
-      $(RestoreSources);
-      https://dotnet.myget.org/F/dotnet-core/api/v3/index.json;
-      https://dotnet.myget.org/F/aspnetcore-dev/api/v3/index.json;
-      https://dotnet.myget.org/F/aspnetcore-tools/api/v3/index.json;
-    </RestoreSources>
-    <RestoreSources Condition="'$(DotNetBuildOffline)' != 'true'">
-      $(RestoreSources);
-      https://api.nuget.org/v3/index.json;
-    </RestoreSources>
-  </PropertyGroup>
-</Project>
diff --git a/korebuild-lock.txt b/korebuild-lock.txt
deleted file mode 100644
index 73613543d..000000000
--- a/korebuild-lock.txt
+++ /dev/null
@@ -1,2 +0,0 @@
-version:3.0.0-build-20181114.5
-commithash:880e9a204d4ee4a18dfd83c9fb05a192a28bca60
diff --git a/korebuild.json b/korebuild.json
deleted file mode 100644
index 8a276a7f3..000000000
--- a/korebuild.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "$schema": "https://raw.githubusercontent.com/aspnet/BuildTools/master/tools/korebuild.schema.json",
-  "channel": "master"
-}
diff --git a/run.cmd b/run.cmd
deleted file mode 100644
index d52d5c7e6..000000000
--- a/run.cmd
+++ /dev/null
@@ -1,2 +0,0 @@
-@ECHO OFF
-PowerShell -NoProfile -NoLogo -ExecutionPolicy unrestricted -Command "[System.Threading.Thread]::CurrentThread.CurrentCulture = ''; [System.Threading.Thread]::CurrentThread.CurrentUICulture = '';& '%~dp0run.ps1' %*; exit $LASTEXITCODE"
diff --git a/run.ps1 b/run.ps1
deleted file mode 100644
index 34604c717..000000000
--- a/run.ps1
+++ /dev/null
@@ -1,209 +0,0 @@
-#!/usr/bin/env powershell
-#requires -version 4
-
-<#
-.SYNOPSIS
-Executes KoreBuild commands.
-
-.DESCRIPTION
-Downloads korebuild if required. Then executes the KoreBuild command. To see available commands, execute with `-Command help`.
-
-.PARAMETER Command
-The KoreBuild command to run.
-
-.PARAMETER Path
-The folder to build. Defaults to the folder containing this script.
-
-.PARAMETER Channel
-The channel of KoreBuild to download. Overrides the value from the config file.
-
-.PARAMETER DotNetHome
-The directory where .NET Core tools will be stored.
-
-.PARAMETER ToolsSource
-The base url where build tools can be downloaded. Overrides the value from the config file.
-
-.PARAMETER Update
-Updates KoreBuild to the latest version even if a lock file is present.
-
-.PARAMETER Reinstall
-Re-installs KoreBuild
-
-.PARAMETER ConfigFile
-The path to the configuration file that stores values. Defaults to korebuild.json.
-
-.PARAMETER ToolsSourceSuffix
-The Suffix to append to the end of the ToolsSource. Useful for query strings in blob stores.
-
-.PARAMETER CI
-Sets up CI specific settings and variables.
-
-.PARAMETER Arguments
-Arguments to be passed to the command
-
-.NOTES
-This function will create a file $PSScriptRoot/korebuild-lock.txt. This lock file can be committed to source, but does not have to be.
-When the lockfile is not present, KoreBuild will create one using latest available version from $Channel.
-
-The $ConfigFile is expected to be an JSON file. It is optional, and the configuration values in it are optional as well. Any options set
-in the file are overridden by command line parameters.
-
-.EXAMPLE
-Example config file:
-```json
-{
-  "$schema": "https://raw.githubusercontent.com/aspnet/BuildTools/master/tools/korebuild.schema.json",
-  "channel": "master",
-  "toolsSource": "https://aspnetcore.blob.core.windows.net/buildtools"
-}
-```
-#>
-[CmdletBinding(PositionalBinding = $false)]
-param(
-    [Parameter(Mandatory = $true, Position = 0)]
-    [string]$Command,
-    [string]$Path = $PSScriptRoot,
-    [Alias('c')]
-    [string]$Channel,
-    [Alias('d')]
-    [string]$DotNetHome,
-    [Alias('s')]
-    [string]$ToolsSource,
-    [Alias('u')]
-    [switch]$Update,
-    [switch]$Reinstall,
-    [string]$ToolsSourceSuffix,
-    [string]$ConfigFile = $null,
-    [switch]$CI,
-    [Parameter(ValueFromRemainingArguments = $true)]
-    [string[]]$Arguments
-)
-
-Set-StrictMode -Version 2
-$ErrorActionPreference = 'Stop'
-
-#
-# Functions
-#
-
-function Get-KoreBuild {
-
-    $lockFile = Join-Path $Path 'korebuild-lock.txt'
-
-    if (!(Test-Path $lockFile) -or $Update) {
-        Get-RemoteFile "$ToolsSource/korebuild/channels/$Channel/latest.txt" $lockFile $ToolsSourceSuffix
-    }
-
-    $version = Get-Content $lockFile | Where-Object { $_ -like 'version:*' } | Select-Object -first 1
-    if (!$version) {
-        Write-Error "Failed to parse version from $lockFile. Expected a line that begins with 'version:'"
-    }
-    $version = $version.TrimStart('version:').Trim()
-    $korebuildPath = Join-Paths $DotNetHome ('buildtools', 'korebuild', $version)
-
-    if ($Reinstall -and (Test-Path $korebuildPath)) {
-        Remove-Item -Force -Recurse $korebuildPath
-    }
-
-    if (!(Test-Path $korebuildPath)) {
-        Write-Host -ForegroundColor Magenta "Downloading KoreBuild $version"
-        New-Item -ItemType Directory -Path $korebuildPath | Out-Null
-        $remotePath = "$ToolsSource/korebuild/artifacts/$version/korebuild.$version.zip"
-
-        try {
-            $tmpfile = Join-Path ([IO.Path]::GetTempPath()) "KoreBuild-$([guid]::NewGuid()).zip"
-            Get-RemoteFile $remotePath $tmpfile $ToolsSourceSuffix
-            if (Get-Command -Name 'Microsoft.PowerShell.Archive\Expand-Archive' -ErrorAction Ignore) {
-                # Use built-in commands where possible as they are cross-plat compatible
-                Microsoft.PowerShell.Archive\Expand-Archive -Path $tmpfile -DestinationPath $korebuildPath
-            }
-            else {
-                # Fallback to old approach for old installations of PowerShell
-                Add-Type -AssemblyName System.IO.Compression.FileSystem
-                [System.IO.Compression.ZipFile]::ExtractToDirectory($tmpfile, $korebuildPath)
-            }
-        }
-        catch {
-            Remove-Item -Recurse -Force $korebuildPath -ErrorAction Ignore
-            throw
-        }
-        finally {
-            Remove-Item $tmpfile -ErrorAction Ignore
-        }
-    }
-
-    return $korebuildPath
-}
-
-function Join-Paths([string]$path, [string[]]$childPaths) {
-    $childPaths | ForEach-Object { $path = Join-Path $path $_ }
-    return $path
-}
-
-function Get-RemoteFile([string]$RemotePath, [string]$LocalPath, [string]$RemoteSuffix) {
-    if ($RemotePath -notlike 'http*') {
-        Copy-Item $RemotePath $LocalPath
-        return
-    }
-
-    $retries = 10
-    while ($retries -gt 0) {
-        $retries -= 1
-        try {
-            Invoke-WebRequest -UseBasicParsing -Uri $($RemotePath + $RemoteSuffix) -OutFile $LocalPath
-            return
-        }
-        catch {
-            Write-Verbose "Request failed. $retries retries remaining"
-        }
-    }
-
-    Write-Error "Download failed: '$RemotePath'."
-}
-
-#
-# Main
-#
-
-# Load configuration or set defaults
-
-$Path = Resolve-Path $Path
-if (!$ConfigFile) { $ConfigFile = Join-Path $Path 'korebuild.json' }
-
-if (Test-Path $ConfigFile) {
-    try {
-        $config = Get-Content -Raw -Encoding UTF8 -Path $ConfigFile | ConvertFrom-Json
-        if ($config) {
-            if (!($Channel) -and (Get-Member -Name 'channel' -InputObject $config)) { [string] $Channel = $config.channel }
-            if (!($ToolsSource) -and (Get-Member -Name 'toolsSource' -InputObject $config)) { [string] $ToolsSource = $config.toolsSource}
-        }
-    }
-    catch {
-        Write-Host -ForegroundColor Red $Error[0]
-        Write-Error "$ConfigFile contains invalid JSON."
-        exit 1
-    }
-}
-
-if (!$DotNetHome) {
-    $DotNetHome = if ($env:DOTNET_HOME) { $env:DOTNET_HOME } `
-        elseif ($env:USERPROFILE) { Join-Path $env:USERPROFILE '.dotnet'} `
-        elseif ($env:HOME) {Join-Path $env:HOME '.dotnet'}`
-        else { Join-Path $PSScriptRoot '.dotnet'}
-}
-
-if (!$Channel) { $Channel = 'master' }
-if (!$ToolsSource) { $ToolsSource = 'https://aspnetcore.blob.core.windows.net/buildtools' }
-
-# Execute
-
-$korebuildPath = Get-KoreBuild
-Import-Module -Force -Scope Local (Join-Path $korebuildPath 'KoreBuild.psd1')
-
-try {
-    Set-KoreBuildSettings -ToolsSource $ToolsSource -DotNetHome $DotNetHome -RepoPath $Path -ConfigFile $ConfigFile -CI:$CI
-    Invoke-KoreBuildCommand $Command @Arguments
-}
-finally {
-    Remove-Module 'KoreBuild' -ErrorAction Ignore
-}
diff --git a/run.sh b/run.sh
deleted file mode 100755
index 4c1fed564..000000000
--- a/run.sh
+++ /dev/null
@@ -1,256 +0,0 @@
-#!/usr/bin/env bash
-
-set -euo pipefail
-
-#
-# variables
-#
-
-RESET="\033[0m"
-RED="\033[0;31m"
-YELLOW="\033[0;33m"
-MAGENTA="\033[0;95m"
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-[ -z "${DOTNET_HOME:-}" ] && DOTNET_HOME="$HOME/.dotnet"
-verbose=false
-update=false
-reinstall=false
-repo_path="$DIR"
-channel=''
-tools_source=''
-tools_source_suffix=''
-ci=false
-
-#
-# Functions
-#
-__usage() {
-    echo "Usage: $(basename "${BASH_SOURCE[0]}") command [options] [[--] <Arguments>...]"
-    echo ""
-    echo "Arguments:"
-    echo "    command                The command to be run."
-    echo "    <Arguments>...         Arguments passed to the command. Variable number of arguments allowed."
-    echo ""
-    echo "Options:"
-    echo "    --verbose                                             Show verbose output."
-    echo "    -c|--channel <CHANNEL>                                The channel of KoreBuild to download. Overrides the value from the config file.."
-    echo "    --config-file <FILE>                                  The path to the configuration file that stores values. Defaults to korebuild.json."
-    echo "    -d|--dotnet-home <DIR>                                The directory where .NET Core tools will be stored. Defaults to '\$DOTNET_HOME' or '\$HOME/.dotnet."
-    echo "    --path <PATH>                                         The directory to build. Defaults to the directory containing the script."
-    echo "    -s|--tools-source|-ToolsSource <URL>                  The base url where build tools can be downloaded. Overrides the value from the config file."
-    echo "    --tools-source-suffix|-ToolsSourceSuffix <SUFFIX>     The suffix to append to tools-source. Useful for query strings."
-    echo "    -u|--update                                           Update to the latest KoreBuild even if the lock file is present."
-    echo "    --reinstall                                           Reinstall KoreBuild."
-    echo "    --ci                                                  Apply CI specific settings and environment variables."
-    echo ""
-    echo "Description:"
-    echo "    This function will create a file \$DIR/korebuild-lock.txt. This lock file can be committed to source, but does not have to be."
-    echo "    When the lockfile is not present, KoreBuild will create one using latest available version from \$channel."
-
-    if [[ "${1:-}" != '--no-exit' ]]; then
-        exit 2
-    fi
-}
-
-get_korebuild() {
-    local version
-    local lock_file="$repo_path/korebuild-lock.txt"
-    if [ ! -f "$lock_file" ] || [ "$update" = true ]; then
-        __get_remote_file "$tools_source/korebuild/channels/$channel/latest.txt" "$lock_file" "$tools_source_suffix"
-    fi
-    version="$(grep 'version:*' -m 1 "$lock_file")"
-    if [[ "$version" == '' ]]; then
-        __error "Failed to parse version from $lock_file. Expected a line that begins with 'version:'"
-        return 1
-    fi
-    version="$(echo "${version#version:}" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
-    local korebuild_path="$DOTNET_HOME/buildtools/korebuild/$version"
-
-    if [ "$reinstall" = true ] && [ -d "$korebuild_path" ]; then
-        rm -rf "$korebuild_path"
-    fi
-
-    {
-        if [ ! -d "$korebuild_path" ]; then
-            mkdir -p "$korebuild_path"
-            local remote_path="$tools_source/korebuild/artifacts/$version/korebuild.$version.zip"
-            tmpfile="$(mktemp)"
-            echo -e "${MAGENTA}Downloading KoreBuild ${version}${RESET}"
-            if __get_remote_file "$remote_path" "$tmpfile" "$tools_source_suffix"; then
-                unzip -q -d "$korebuild_path" "$tmpfile"
-            fi
-            rm "$tmpfile" || true
-        fi
-
-        source "$korebuild_path/KoreBuild.sh"
-    } || {
-        if [ -d "$korebuild_path" ]; then
-            echo "Cleaning up after failed installation"
-            rm -rf "$korebuild_path" || true
-        fi
-        return 1
-    }
-}
-
-__error() {
-    echo -e "${RED}error: $*${RESET}" 1>&2
-}
-
-__warn() {
-    echo -e "${YELLOW}warning: $*${RESET}"
-}
-
-__machine_has() {
-    hash "$1" > /dev/null 2>&1
-    return $?
-}
-
-__get_remote_file() {
-    local remote_path=$1
-    local local_path=$2
-    local remote_path_suffix=$3
-
-    if [[ "$remote_path" != 'http'* ]]; then
-        cp "$remote_path" "$local_path"
-        return 0
-    fi
-
-    local failed=false
-    if __machine_has wget; then
-        wget --tries 10 --quiet -O "$local_path" "${remote_path}${remote_path_suffix}" || failed=true
-    else
-        failed=true
-    fi
-
-    if [ "$failed" = true ] && __machine_has curl; then
-        failed=false
-        curl --retry 10 -sSL -f --create-dirs -o "$local_path" "${remote_path}${remote_path_suffix}" || failed=true
-    fi
-
-    if [ "$failed" = true ]; then
-        __error "Download failed: $remote_path" 1>&2
-        return 1
-    fi
-}
-
-#
-# main
-#
-
-command="${1:-}"
-shift
-
-while [[ $# -gt 0 ]]; do
-    case $1 in
-        -\?|-h|--help)
-            __usage --no-exit
-            exit 0
-            ;;
-        -c|--channel|-Channel)
-            shift
-            channel="${1:-}"
-            [ -z "$channel" ] && __usage
-            ;;
-        --config-file|-ConfigFile)
-            shift
-            config_file="${1:-}"
-            [ -z "$config_file" ] && __usage
-            if [ ! -f "$config_file" ]; then
-                __error "Invalid value for --config-file. $config_file does not exist."
-                exit 1
-            fi
-            ;;
-        -d|--dotnet-home|-DotNetHome)
-            shift
-            DOTNET_HOME="${1:-}"
-            [ -z "$DOTNET_HOME" ] && __usage
-            ;;
-        --path|-Path)
-            shift
-            repo_path="${1:-}"
-            [ -z "$repo_path" ] && __usage
-            ;;
-        -s|--tools-source|-ToolsSource)
-            shift
-            tools_source="${1:-}"
-            [ -z "$tools_source" ] && __usage
-            ;;
-        --tools-source-suffix|-ToolsSourceSuffix)
-            shift
-            tools_source_suffix="${1:-}"
-            [ -z "$tools_source_suffix" ] && __usage
-            ;;
-        -u|--update|-Update)
-            update=true
-            ;;
-        --reinstall|-[Rr]einstall)
-            reinstall=true
-            ;;
-        --ci|-[Cc][Ii])
-            ci=true
-            ;;
-        --verbose|-Verbose)
-            verbose=true
-            ;;
-        --)
-            shift
-            break
-            ;;
-        *)
-            break
-            ;;
-    esac
-    shift
-done
-
-if ! __machine_has unzip; then
-    __error 'Missing required command: unzip'
-    exit 1
-fi
-
-if ! __machine_has curl && ! __machine_has wget; then
-    __error 'Missing required command. Either wget or curl is required.'
-    exit 1
-fi
-
-[ -z "${config_file:-}" ] && config_file="$repo_path/korebuild.json"
-if [ -f "$config_file" ]; then
-    if __machine_has jq ; then
-        if jq '.' "$config_file" >/dev/null ; then
-            config_channel="$(jq -r 'select(.channel!=null) | .channel' "$config_file")"
-            config_tools_source="$(jq -r 'select(.toolsSource!=null) | .toolsSource' "$config_file")"
-        else
-            __error "$config_file contains invalid JSON."
-            exit 1
-        fi
-    elif __machine_has python ; then
-        if python -c "import json,codecs;obj=json.load(codecs.open('$config_file', 'r', 'utf-8-sig'))" >/dev/null ; then
-            config_channel="$(python -c "import json,codecs;obj=json.load(codecs.open('$config_file', 'r', 'utf-8-sig'));print(obj['channel'] if 'channel' in obj else '')")"
-            config_tools_source="$(python -c "import json,codecs;obj=json.load(codecs.open('$config_file', 'r', 'utf-8-sig'));print(obj['toolsSource'] if 'toolsSource' in obj else '')")"
-        else
-            __error "$config_file contains invalid JSON."
-            exit 1
-        fi
-    elif __machine_has python3 ; then
-        if python3 -c "import json,codecs;obj=json.load(codecs.open('$config_file', 'r', 'utf-8-sig'))" >/dev/null ; then
-            config_channel="$(python3 -c "import json,codecs;obj=json.load(codecs.open('$config_file', 'r', 'utf-8-sig'));print(obj['channel'] if 'channel' in obj else '')")"
-            config_tools_source="$(python3 -c "import json,codecs;obj=json.load(codecs.open('$config_file', 'r', 'utf-8-sig'));print(obj['toolsSource'] if 'toolsSource' in obj else '')")"
-        else
-            __error "$config_file contains invalid JSON."
-            exit 1
-        fi
-    else
-        __error 'Missing required command: jq or python. Could not parse the JSON file.'
-        exit 1
-    fi
-
-    [ ! -z "${config_channel:-}" ] && channel="$config_channel"
-    [ ! -z "${config_tools_source:-}" ] && tools_source="$config_tools_source"
-fi
-
-[ -z "$channel" ] && channel='master'
-[ -z "$tools_source" ] && tools_source='https://aspnetcore.blob.core.windows.net/buildtools'
-
-get_korebuild
-set_korebuildsettings "$tools_source" "$DOTNET_HOME" "$repo_path" "$config_file" "$ci"
-invoke_korebuild_command "$command" "$@"
diff --git a/samples/CookiePolicySample/CookiePolicySample.csproj b/samples/CookiePolicySample/CookiePolicySample.csproj
deleted file mode 100644
index 010edb018..000000000
--- a/samples/CookiePolicySample/CookiePolicySample.csproj
+++ /dev/null
@@ -1,18 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.CookiePolicy\Microsoft.AspNetCore.CookiePolicy.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Server.IISIntegration" Version="$(MicrosoftAspNetCoreServerIISIntegrationPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel" Version="$(MicrosoftAspNetCoreServerKestrelPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="$(MicrosoftExtensionsLoggingConsolePackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/samples/CookiePolicySample/Program.cs b/samples/CookiePolicySample/Program.cs
deleted file mode 100644
index 3fc09a3db..000000000
--- a/samples/CookiePolicySample/Program.cs
+++ /dev/null
@@ -1,26 +0,0 @@
-using System.IO;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.Extensions.Logging;
-
-namespace CookiePolicySample
-{
-    public static class Program
-    {
-        public static void Main(string[] args)
-        {
-            var host = new WebHostBuilder()
-                .ConfigureLogging(factory =>
-                {
-                    factory.AddConsole();
-                    factory.AddFilter("Microsoft", LogLevel.Trace);
-                })
-                .UseKestrel()
-                .UseContentRoot(Directory.GetCurrentDirectory())
-                .UseIISIntegration()
-                .UseStartup<Startup>()
-                .Build();
-
-            host.Run();
-        }
-    }
-}
diff --git a/samples/CookiePolicySample/Properties/launchSettings.json b/samples/CookiePolicySample/Properties/launchSettings.json
deleted file mode 100644
index 38ca6fc37..000000000
--- a/samples/CookiePolicySample/Properties/launchSettings.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "iisSettings": {
-    "windowsAuthentication": false,
-    "anonymousAuthentication": true,
-    "iisExpress": {
-      "applicationUrl": "http://localhost:1788/",
-      "sslPort": 0
-    }
-  },
-  "profiles": {
-    "IIS Express": {
-      "commandName": "IISExpress",
-      "launchBrowser": true,
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    },
-    "CookieSample": {
-      "commandName": "Project",
-      "launchBrowser": true,
-      "applicationUrl": "http://localhost:12345",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/samples/CookiePolicySample/Startup.cs b/samples/CookiePolicySample/Startup.cs
deleted file mode 100644
index 4dcc6d4dc..000000000
--- a/samples/CookiePolicySample/Startup.cs
+++ /dev/null
@@ -1,127 +0,0 @@
-using System;
-using System.Linq;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Net.Http.Headers;
-
-namespace CookiePolicySample
-{
-    public class Startup
-    {
-        public void ConfigureServices(IServiceCollection services)
-        {
-            services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
-                .AddCookie();
-            services.Configure<CookiePolicyOptions>(options =>
-            {
-                options.CheckConsentNeeded = context => context.Request.PathBase.Equals("/NeedsConsent");
-
-                options.OnAppendCookie = context => { };
-            });
-        }
-
-        public void Configure(IApplicationBuilder app)
-        {
-            app.UseCookiePolicy();
-            app.UseAuthentication();
-
-            app.Map("/NeedsConsent", NestedApp);
-            app.Map("/NeedsNoConsent", NestedApp);
-            NestedApp(app);
-        }
-
-        private void NestedApp(IApplicationBuilder app)
-        {
-            app.Run(async context =>
-            {
-                var path = context.Request.Path;
-                switch (path)
-                {
-                    case "/Login":
-                        var user = new ClaimsPrincipal(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Name, "bob") },
-                            CookieAuthenticationDefaults.AuthenticationScheme));
-                        await context.SignInAsync(user);
-                        break;
-                    case "/Logout":
-                        await context.SignOutAsync();
-                        break;
-                    case "/CreateTempCookie":
-                        context.Response.Cookies.Append("Temp", "1");
-                        break;
-                    case "/RemoveTempCookie":
-                        context.Response.Cookies.Delete("Temp");
-                        break;
-                    case "/CreateEssentialCookie":
-                        context.Response.Cookies.Append("EssentialCookie", "2",
-                            new CookieOptions() { IsEssential = true });
-                        break;
-                    case "/RemoveEssentialCookie":
-                        context.Response.Cookies.Delete("EssentialCookie");
-                        break;
-                    case "/GrantConsent":
-                        context.Features.Get<ITrackingConsentFeature>().GrantConsent();
-                        break;
-                    case "/WithdrawConsent":
-                        context.Features.Get<ITrackingConsentFeature>().WithdrawConsent();
-                        break;
-                }
-
-                // TODO: Debug log when cookie is suppressed
-
-                await HomePage(context);
-            });
-        }
-
-        private async Task HomePage(HttpContext context)
-        {
-            var response = context.Response;
-            var cookies = context.Request.Cookies;
-            response.ContentType = "text/html";
-            await response.WriteAsync("<html><body>\r\n");
-
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/\">Home</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/Login\">Login</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/Logout\">Logout</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/CreateTempCookie\">Create Temp Cookie</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/RemoveTempCookie\">Remove Temp Cookie</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/CreateEssentialCookie\">Create Essential Cookie</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/RemoveEssentialCookie\">Remove Essential Cookie</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/GrantConsent\">Grant Consent</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"{context.Request.PathBase}/WithdrawConsent\">Withdraw Consent</a><br>\r\n");
-            await response.WriteAsync("<br>\r\n");
-            await response.WriteAsync($"<a href=\"/NeedsConsent{context.Request.Path}\">Needs Consent</a><br>\r\n");
-            await response.WriteAsync($"<a href=\"/NeedsNoConsent{context.Request.Path}\">Needs No Consent</a><br>\r\n");
-            await response.WriteAsync("<br>\r\n");
-
-            var feature = context.Features.Get<ITrackingConsentFeature>();
-            await response.WriteAsync($"Consent: <br>\r\n");
-            await response.WriteAsync($" - IsNeeded: {feature.IsConsentNeeded} <br>\r\n");
-            await response.WriteAsync($" - Has: {feature.HasConsent} <br>\r\n");
-            await response.WriteAsync($" - Can Track: {feature.CanTrack} <br>\r\n");
-            await response.WriteAsync("<br>\r\n");
-
-            await response.WriteAsync($"{cookies.Count} Request Cookies:<br>\r\n");
-            foreach (var cookie in cookies)
-            {
-                await response.WriteAsync($" - {cookie.Key} = {cookie.Value} <br>\r\n");
-            }
-            await response.WriteAsync("<br>\r\n");
-
-            var responseCookies = response.Headers[HeaderNames.SetCookie];
-            await response.WriteAsync($"{responseCookies.Count} Response Cookies:<br>\r\n");
-            foreach (var cookie in responseCookies)
-            {
-                await response.WriteAsync($" - {cookie} <br>\r\n");
-            }          
-
-            await response.WriteAsync("</body></html>");
-        }
-    }
-}
diff --git a/samples/CookieSample/CookieSample.csproj b/samples/CookieSample/CookieSample.csproj
deleted file mode 100644
index bc92d68a2..000000000
--- a/samples/CookieSample/CookieSample.csproj
+++ /dev/null
@@ -1,20 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Hosting" Version="$(MicrosoftAspNetCoreHostingPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="$(MicrosoftAspNetCoreDataProtectionPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.IISIntegration" Version="$(MicrosoftAspNetCoreServerIISIntegrationPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel" Version="$(MicrosoftAspNetCoreServerKestrelPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="$(MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="$(MicrosoftExtensionsLoggingConsolePackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/samples/CookieSample/Program.cs b/samples/CookieSample/Program.cs
deleted file mode 100644
index 3f40d3194..000000000
--- a/samples/CookieSample/Program.cs
+++ /dev/null
@@ -1,26 +0,0 @@
-using System.IO;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.Extensions.Logging;
-
-namespace CookieSample
-{
-    public static class Program
-    {
-        public static void Main(string[] args)
-        {
-            var host = new WebHostBuilder()
-                .ConfigureLogging(factory =>
-                {
-                    factory.AddConsole();
-                    factory.AddFilter("Console", level => level >= LogLevel.Information);
-                })
-                .UseKestrel()
-                .UseContentRoot(Directory.GetCurrentDirectory())
-                .UseIISIntegration()
-                .UseStartup<Startup>()
-                .Build();
-
-            host.Run();
-        }
-    }
-}
diff --git a/samples/CookieSample/Properties/launchSettings.json b/samples/CookieSample/Properties/launchSettings.json
deleted file mode 100644
index 38ca6fc37..000000000
--- a/samples/CookieSample/Properties/launchSettings.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "iisSettings": {
-    "windowsAuthentication": false,
-    "anonymousAuthentication": true,
-    "iisExpress": {
-      "applicationUrl": "http://localhost:1788/",
-      "sslPort": 0
-    }
-  },
-  "profiles": {
-    "IIS Express": {
-      "commandName": "IISExpress",
-      "launchBrowser": true,
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    },
-    "CookieSample": {
-      "commandName": "Project",
-      "launchBrowser": true,
-      "applicationUrl": "http://localhost:12345",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/samples/CookieSample/Startup.cs b/samples/CookieSample/Startup.cs
deleted file mode 100644
index a91791070..000000000
--- a/samples/CookieSample/Startup.cs
+++ /dev/null
@@ -1,45 +0,0 @@
-using System.Linq;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.DependencyInjection;
-
-namespace CookieSample
-{
-    public class Startup
-    {
-        public void ConfigureServices(IServiceCollection services)
-        {
-            // This can be removed after https://github.com/aspnet/IISIntegration/issues/371
-            services.AddAuthentication(options =>
-            {
-                options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                options.DefaultChallengeScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-            }).AddCookie();
-        }
-
-        public void Configure(IApplicationBuilder app)
-        {
-            app.UseAuthentication();
-
-            app.Run(async context =>
-            {
-                if (!context.User.Identities.Any(identity => identity.IsAuthenticated))
-                {
-                    var user = new ClaimsPrincipal(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Name, "bob") }, CookieAuthenticationDefaults.AuthenticationScheme));
-                    await context.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme, user);
-
-                    context.Response.ContentType = "text/plain";
-                    await context.Response.WriteAsync("Hello First timer");
-                    return;
-                }
-
-                context.Response.ContentType = "text/plain";
-                await context.Response.WriteAsync("Hello old timer");
-            });
-        }
-    }
-}
diff --git a/samples/CookieSessionSample/CookieSessionSample.csproj b/samples/CookieSessionSample/CookieSessionSample.csproj
deleted file mode 100644
index 6230c98a5..000000000
--- a/samples/CookieSessionSample/CookieSessionSample.csproj
+++ /dev/null
@@ -1,20 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="$(MicrosoftAspNetCoreDataProtectionPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.IISIntegration" Version="$(MicrosoftAspNetCoreServerIISIntegrationPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel" Version="$(MicrosoftAspNetCoreServerKestrelPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="$(MicrosoftExtensionsCachingMemoryPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="$(MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="$(MicrosoftExtensionsLoggingConsolePackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/samples/CookieSessionSample/MemoryCacheTicketStore.cs b/samples/CookieSessionSample/MemoryCacheTicketStore.cs
deleted file mode 100644
index ebb660361..000000000
--- a/samples/CookieSessionSample/MemoryCacheTicketStore.cs
+++ /dev/null
@@ -1,55 +0,0 @@
-using System;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.Extensions.Caching.Memory;
-
-namespace CookieSessionSample
-{
-    public class MemoryCacheTicketStore : ITicketStore
-    {
-        private const string KeyPrefix = "AuthSessionStore-";
-        private IMemoryCache _cache;
-
-        public MemoryCacheTicketStore()
-        {
-            _cache = new MemoryCache(new MemoryCacheOptions());
-        }
-
-        public async Task<string> StoreAsync(AuthenticationTicket ticket)
-        {
-            var guid = Guid.NewGuid();
-            var key = KeyPrefix + guid.ToString();
-            await RenewAsync(key, ticket);
-            return key;
-        }
-
-        public Task RenewAsync(string key, AuthenticationTicket ticket)
-        {
-            var options = new MemoryCacheEntryOptions();
-            var expiresUtc = ticket.Properties.ExpiresUtc;
-            if (expiresUtc.HasValue)
-            {
-                options.SetAbsoluteExpiration(expiresUtc.Value);
-            }
-            options.SetSlidingExpiration(TimeSpan.FromHours(1)); // TODO: configurable.
-
-            _cache.Set(key, ticket, options);
-
-            return Task.FromResult(0);
-        }
-
-        public Task<AuthenticationTicket> RetrieveAsync(string key)
-        {
-            AuthenticationTicket ticket;
-            _cache.TryGetValue(key, out ticket);
-            return Task.FromResult(ticket);
-        }
-
-        public Task RemoveAsync(string key)
-        {
-            _cache.Remove(key);
-            return Task.FromResult(0);
-        }
-    }
-}
diff --git a/samples/CookieSessionSample/Program.cs b/samples/CookieSessionSample/Program.cs
deleted file mode 100644
index 1a19850e6..000000000
--- a/samples/CookieSessionSample/Program.cs
+++ /dev/null
@@ -1,26 +0,0 @@
-using System.IO;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.Extensions.Logging;
-
-namespace CookieSessionSample
-{
-    public static class Program
-    {
-        public static void Main(string[] args)
-        {
-            var host = new WebHostBuilder()
-                .ConfigureLogging(factory =>
-                {
-                    factory.AddConsole();
-                    factory.AddFilter("Console", level => level >= LogLevel.Information);
-                })
-                .UseKestrel()
-                .UseContentRoot(Directory.GetCurrentDirectory())
-                .UseIISIntegration()
-                .UseStartup<Startup>()
-                .Build();
-
-            host.Run();
-        }
-    }
-}
diff --git a/samples/CookieSessionSample/Properties/launchSettings.json b/samples/CookieSessionSample/Properties/launchSettings.json
deleted file mode 100644
index 25de3e478..000000000
--- a/samples/CookieSessionSample/Properties/launchSettings.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "iisSettings": {
-    "windowsAuthentication": false,
-    "anonymousAuthentication": true,
-    "iisExpress": {
-      "applicationUrl": "http://localhost:1790/",
-      "sslPort": 0
-    }
-  },
-  "profiles": {
-    "IIS Express": {
-      "commandName": "IISExpress",
-      "launchBrowser": true,
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    },
-    "CookieSessionSample": {
-      "commandName": "Project",
-      "launchBrowser": true,
-      "applicationUrl": "http://localhost:12345",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/samples/CookieSessionSample/Startup.cs b/samples/CookieSessionSample/Startup.cs
deleted file mode 100644
index f7b8f2bb8..000000000
--- a/samples/CookieSessionSample/Startup.cs
+++ /dev/null
@@ -1,54 +0,0 @@
-using System.Collections.Generic;
-using System.Linq;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.Extensions.DependencyInjection;
-
-namespace CookieSessionSample
-{
-    public class Startup
-    {
-        public void ConfigureServices(IServiceCollection services)
-        {
-            // This can be removed after https://github.com/aspnet/IISIntegration/issues/371
-            services.AddAuthentication(options =>
-            {
-                options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                options.DefaultChallengeScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-            }).AddCookie(o => o.SessionStore = new MemoryCacheTicketStore());
-        }
-
-        public void Configure(IApplicationBuilder app)
-        {
-            app.UseAuthentication();
-
-            app.Run(async context =>
-            {
-                if (!context.User.Identities.Any(identity => identity.IsAuthenticated))
-                {
-                    // Make a large identity
-                    var claims = new List<Claim>(1001);
-                    claims.Add(new Claim(ClaimTypes.Name, "bob"));
-                    for (int i = 0; i < 1000; i++)
-                    {
-                        claims.Add(new Claim(ClaimTypes.Role, "SomeRandomGroup" + i, ClaimValueTypes.String, "IssuedByBob", "OriginalIssuerJoe"));
-                    }
-
-                    await context.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme,
-                        new ClaimsPrincipal(new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme)));
-
-                    context.Response.ContentType = "text/plain";
-                    await context.Response.WriteAsync("Hello First timer");
-                    return;
-                }
-
-                context.Response.ContentType = "text/plain";
-                await context.Response.WriteAsync("Hello old timer");
-            });
-        }
-    }
-}
diff --git a/samples/JwtBearerSample/JwtBearerSample.csproj b/samples/JwtBearerSample/JwtBearerSample.csproj
deleted file mode 100644
index 58bf5e2d9..000000000
--- a/samples/JwtBearerSample/JwtBearerSample.csproj
+++ /dev/null
@@ -1,21 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <UserSecretsId>aspnet5-JwtBearerSample-20151210102827</UserSecretsId>
- </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.JwtBearer\Microsoft.AspNetCore.Authentication.JwtBearer.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Server.IISIntegration" Version="$(MicrosoftAspNetCoreServerIISIntegrationPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel" Version="$(MicrosoftAspNetCoreServerKestrelPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.StaticFiles" Version="$(MicrosoftAspNetCoreStaticFilesPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="$(MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.UserSecrets" Version="$(MicrosoftExtensionsConfigurationUserSecretsPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Diagnostics" Version="$(MicrosoftAspNetCoreDiagnosticsPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/samples/JwtBearerSample/Program.cs b/samples/JwtBearerSample/Program.cs
deleted file mode 100644
index 44d2fe0c4..000000000
--- a/samples/JwtBearerSample/Program.cs
+++ /dev/null
@@ -1,21 +0,0 @@
-using System.IO;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.Extensions.Configuration;
-
-namespace JwtBearerSample
-{
-    public static class Program
-    {
-        public static void Main(string[] args)
-        {
-            var host = new WebHostBuilder()
-                .UseKestrel()
-                .UseContentRoot(Directory.GetCurrentDirectory())
-                .UseIISIntegration()
-                .UseStartup<Startup>()
-                .Build();
-
-            host.Run();
-        }
-    }
-}
diff --git a/samples/JwtBearerSample/Properties/launchSettings.json b/samples/JwtBearerSample/Properties/launchSettings.json
deleted file mode 100644
index 6922375c9..000000000
--- a/samples/JwtBearerSample/Properties/launchSettings.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "iisSettings": {
-    "windowsAuthentication": false,
-    "anonymousAuthentication": true,
-    "iisExpress": {
-      "applicationUrl": "http://localhost:42023",
-      "sslPort": 0
-    }
-  },
-  "profiles": {
-    "IIS Express": {
-      "commandName": "IISExpress",
-      "launchBrowser": true,
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    },
-    "JwtBearer": {
-      "commandName": "Project",
-      "launchBrowser": true,
-      "applicationUrl": "http://localhost:42023",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/samples/JwtBearerSample/Startup.cs b/samples/JwtBearerSample/Startup.cs
deleted file mode 100644
index 8c4a63cad..000000000
--- a/samples/JwtBearerSample/Startup.cs
+++ /dev/null
@@ -1,111 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.IO;
-using System.Runtime.ExceptionServices;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.JwtBearer;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Configuration;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Net.Http.Headers;
-using Newtonsoft.Json.Linq;
-
-namespace JwtBearerSample
-{
-    public class Startup
-    {
-        public Startup(IHostingEnvironment env)
-        {
-            Environment = env;
-
-            var builder = new ConfigurationBuilder()
-                .SetBasePath(env.ContentRootPath);
-
-            if (env.IsDevelopment())
-            {
-                // For more details on using the user secret store see http://go.microsoft.com/fwlink/?LinkID=532709
-                builder.AddUserSecrets<Startup>();
-            }
-
-            builder.AddEnvironmentVariables();
-            Configuration = builder.Build();
-        }
-
-        public IConfiguration Configuration { get; set; }
-
-        public IHostingEnvironment Environment { get; set; }
-
-        // Shared between users in memory
-        public IList<Todo> Todos { get; } = new List<Todo>();
-
-        // This method gets called by the runtime. Use this method to add services to the container.
-        // For more information on how to configure your application, visit http://go.microsoft.com/fwlink/?LinkID=398940
-        public void ConfigureServices(IServiceCollection services)
-        {
-            services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
-                .AddJwtBearer(o =>
-                {
-                    // You also need to update /wwwroot/app/scripts/app.js
-                    o.Authority = Configuration["oidc:authority"];
-                    o.Audience = Configuration["oidc:clientid"];
-                });
-        }
-
-        // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
-        public void Configure(IApplicationBuilder app)
-        {
-            app.UseDeveloperExceptionPage();
-
-            app.UseDefaultFiles();
-            app.UseStaticFiles();
-
-            app.UseAuthentication();
-
-            // [Authorize] would usually handle this
-            app.Use(async (context, next) =>
-            {
-                // Use this if there are multiple authentication schemes
-                var authResult = await context.AuthenticateAsync(JwtBearerDefaults.AuthenticationScheme);
-                if (authResult.Succeeded && authResult.Principal.Identity.IsAuthenticated)
-                {
-                    await next();
-                }
-                else if (authResult.Failure != null)
-                {
-                    // Rethrow, let the exception page handle it.
-                    ExceptionDispatchInfo.Capture(authResult.Failure).Throw();
-                }
-                else
-                {
-                    await context.ChallengeAsync();
-                }
-            });
-
-            // MVC would usually handle this:
-            app.Map("/api/TodoList", todoApp =>
-            {
-                todoApp.Run(async context =>
-                {
-                    var response = context.Response;
-                    if (context.Request.Method.Equals("POST", System.StringComparison.OrdinalIgnoreCase))
-                    {
-                        var reader = new StreamReader(context.Request.Body);
-                        var body = await reader.ReadToEndAsync();
-                        var obj = JObject.Parse(body);
-                        var todo = new Todo() { Description = obj["Description"].Value<string>(), Owner = context.User.Identity.Name };
-                        Todos.Add(todo);
-                    }
-                    else
-                    {
-                        response.ContentType = "application/json";
-                        response.Headers[HeaderNames.CacheControl] = "no-cache";
-                        var json = JToken.FromObject(Todos);
-                        await response.WriteAsync(json.ToString());
-                    }
-                });
-            });
-        }
-    }
-}
\ No newline at end of file
diff --git a/samples/JwtBearerSample/Todo.cs b/samples/JwtBearerSample/Todo.cs
deleted file mode 100644
index 3ddf40414..000000000
--- a/samples/JwtBearerSample/Todo.cs
+++ /dev/null
@@ -1,8 +0,0 @@
-namespace JwtBearerSample
-{
-    public class Todo
-    {
-        public string Description { get; set; }
-        public string Owner { get; set; }
-    }
-}
diff --git a/samples/JwtBearerSample/wwwroot/App/Scripts/app.js b/samples/JwtBearerSample/wwwroot/App/Scripts/app.js
deleted file mode 100644
index b45cb760b..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Scripts/app.js
+++ /dev/null
@@ -1,28 +0,0 @@
-'use strict';
-angular.module('todoApp', ['ngRoute','AdalAngular'])
-.config(['$routeProvider', '$httpProvider', 'adalAuthenticationServiceProvider', function ($routeProvider, $httpProvider, adalProvider) {
-
-    $routeProvider.when("/Home", {
-        controller: "homeCtrl",
-        templateUrl: "/App/Views/Home.html",
-    }).when("/TodoList", {
-        controller: "todoListCtrl",
-        templateUrl: "/App/Views/TodoList.html",
-        requireADLogin: true,
-    }).when("/UserData", {
-        controller: "userDataCtrl",
-        templateUrl: "/App/Views/UserData.html",
-    }).otherwise({ redirectTo: "/Home" });
-
-    adalProvider.init(
-        {
-            instance: 'https://login.microsoftonline.com/', 
-            tenant: 'tratcheroutlook.onmicrosoft.com',
-            clientId: '63a87a83-64b9-4ac1-b2c5-092126f8474f',
-            extraQueryParameter: 'nux=1',
-            // cacheLocation: 'localStorage', // enable this for IE, as sessionStorage does not work for localhost.
-        },
-        $httpProvider
-        );
-   
-}]);
diff --git a/samples/JwtBearerSample/wwwroot/App/Scripts/homeCtrl.js b/samples/JwtBearerSample/wwwroot/App/Scripts/homeCtrl.js
deleted file mode 100644
index 09a3beae5..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Scripts/homeCtrl.js
+++ /dev/null
@@ -1,13 +0,0 @@
-'use strict';
-angular.module('todoApp')
-.controller('homeCtrl', ['$scope', 'adalAuthenticationService','$location', function ($scope, adalService, $location) {
-    $scope.login = function () {
-        adalService.login();
-    };
-    $scope.logout = function () {
-        adalService.logOut();
-    };
-    $scope.isActive = function (viewLocation) {        
-        return viewLocation === $location.path();
-    };
-}]);
\ No newline at end of file
diff --git a/samples/JwtBearerSample/wwwroot/App/Scripts/indexCtrl.js b/samples/JwtBearerSample/wwwroot/App/Scripts/indexCtrl.js
deleted file mode 100644
index baaa4b242..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Scripts/indexCtrl.js
+++ /dev/null
@@ -1,5 +0,0 @@
-'use strict';
-angular.module('todoApp')
-.controller('indexCtrl', ['$scope', 'adalAuthenticationService', function ($scope, adalService) {
-
-}]);
\ No newline at end of file
diff --git a/samples/JwtBearerSample/wwwroot/App/Scripts/todoListCtrl.js b/samples/JwtBearerSample/wwwroot/App/Scripts/todoListCtrl.js
deleted file mode 100644
index 7dbd4f29c..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Scripts/todoListCtrl.js
+++ /dev/null
@@ -1,71 +0,0 @@
-'use strict';
-angular.module('todoApp')
-.controller('todoListCtrl', ['$scope', '$location', 'todoListSvc', 'adalAuthenticationService', function ($scope, $location, todoListSvc, adalService) {
-    $scope.error = "";
-    $scope.loadingMessage = "Loading...";
-    $scope.todoList = null;
-    $scope.editingInProgress = false;
-    $scope.newTodoCaption = "";
-
-
-    $scope.editInProgressTodo = {
-        Description: "",
-        ID: 0
-    };
-
-    
-
-    $scope.editSwitch = function (todo) {
-        todo.edit = !todo.edit;
-        if (todo.edit) {
-            $scope.editInProgressTodo.Description = todo.Description;
-            $scope.editInProgressTodo.ID = todo.ID;
-            $scope.editingInProgress = true;
-        } else {
-            $scope.editingInProgress = false;
-        }
-    };
-
-    $scope.populate = function () {
-        todoListSvc.getItems().success(function (results) {
-            $scope.todoList = results;
-            $scope.loadingMessage = "";
-        }).error(function (err) {
-            $scope.error = err;
-            $scope.loadingMessage = "";
-        })
-    };
-    $scope.delete = function (id) {
-        todoListSvc.deleteItem(id).success(function (results) {
-            $scope.loadingMessage = "";
-            $scope.populate();
-        }).error(function (err) {
-            $scope.error = err;
-            $scope.loadingMessage = "";
-        })
-    };
-    $scope.update = function (todo) {
-        todoListSvc.putItem($scope.editInProgressTodo).success(function (results) {
-            $scope.loadingMsg = "";
-            $scope.populate();
-            $scope.editSwitch(todo);
-        }).error(function (err) {
-            $scope.error = err;
-            $scope.loadingMessage = "";
-        })
-    };
-    $scope.add = function () {
-
-        todoListSvc.postItem({
-            'Description': $scope.newTodoCaption,
-            'Owner': adalService.userInfo.userName
-        }).success(function (results) {
-            $scope.loadingMsg = "";
-            $scope.newTodoCaption = "";
-            $scope.populate();
-        }).error(function (err) {
-            $scope.error = err;
-            $scope.loadingMsg = "";
-        })
-    };
-}]);
\ No newline at end of file
diff --git a/samples/JwtBearerSample/wwwroot/App/Scripts/todoListSvc.js b/samples/JwtBearerSample/wwwroot/App/Scripts/todoListSvc.js
deleted file mode 100644
index 87d064108..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Scripts/todoListSvc.js
+++ /dev/null
@@ -1,24 +0,0 @@
-'use strict';
-angular.module('todoApp')
-.factory('todoListSvc', ['$http', function ($http) {
-    return {
-        getItems : function(){
-            return $http.get('/api/TodoList');
-        },
-        getItem : function(id){
-            return $http.get('/api/TodoList/' + id);
-        },
-        postItem : function(item){
-            return $http.post('/api/TodoList/',item);
-        },
-        putItem : function(item){
-            return $http.put('/api/TodoList/', item);
-        },
-        deleteItem : function(id){
-            return $http({
-                method: 'DELETE',
-                url: '/api/TodoList/' + id
-            });
-        }
-    };
-}]);
\ No newline at end of file
diff --git a/samples/JwtBearerSample/wwwroot/App/Scripts/userDataCtrl.js b/samples/JwtBearerSample/wwwroot/App/Scripts/userDataCtrl.js
deleted file mode 100644
index 1b2511fdc..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Scripts/userDataCtrl.js
+++ /dev/null
@@ -1,6 +0,0 @@
-'use strict';
-angular.module('todoApp')
-.controller('userDataCtrl', ['$scope', 'adalAuthenticationService', function ($scope, adalService) {
-
-
-}]);
\ No newline at end of file
diff --git a/samples/JwtBearerSample/wwwroot/App/Views/Home.html b/samples/JwtBearerSample/wwwroot/App/Views/Home.html
deleted file mode 100644
index 49f14e1d5..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Views/Home.html
+++ /dev/null
@@ -1,3 +0,0 @@
-<div>
-    home sweet home
-</div>
diff --git a/samples/JwtBearerSample/wwwroot/App/Views/TodoList.html b/samples/JwtBearerSample/wwwroot/App/Views/TodoList.html
deleted file mode 100644
index 8ade518a5..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Views/TodoList.html
+++ /dev/null
@@ -1,24 +0,0 @@
-<div ng-init="populate()">
-    <p class="error">{{error}}</p>
-    <p>{{loadingMessage}}</p>
-    <div class="panel">
-        <div class="input-group">
-            <input ng-model="newTodoCaption" class="form-control" />
-            <span class="input-group-btn">
-                <button ng-click="add();" class="btn btn-default">Add</button>
-            </span>
-        </div>
-        <table class="table table-striped">
-            <tbody>
-                <tr data-ng-repeat="item in todoList">
-                    <td>
-                        <p data-ng-hide="item.edit">{{item.Description}}</p>                      
-                    </td>
-                    <td>
-                        <p data-ng-hide="item.edit">{{item.Owner}}</p>
-                    </td>
-                </tr>
-            </tbody>
-        </table>
-    </div>
-</div>
\ No newline at end of file
diff --git a/samples/JwtBearerSample/wwwroot/App/Views/UserData.html b/samples/JwtBearerSample/wwwroot/App/Views/UserData.html
deleted file mode 100644
index cacd57edb..000000000
--- a/samples/JwtBearerSample/wwwroot/App/Views/UserData.html
+++ /dev/null
@@ -1,23 +0,0 @@
-<div>
-    <h3>
-        Id_token content
-    </h3>
-    <p>{{userInfo.userName}}</p>
-    <p>aud:{{userInfo.profile.aud}}</p>
-    <p>iss:{{userInfo.profile.iss}}</p>
-    <p>iat:{{userInfo.profile.iat}}</p>
-    <p>nbf:{{userInfo.profile.nbf}}</p>
-    <p>exp:{{userInfo.profile.exp}}</p>
-    <p>ver:{{userInfo.profile.ver}}</p>
-    <p>tid:{{userInfo.profile.tid}}</p>
-    <p>amr:{{userInfo.profile.amr}}</p>
-    <p>oid:{{userInfo.profile.oid}}</p>
-    <p>upn:{{userInfo.profile.upn}}</p>
-    <p>unique_name:{{userInfo.profile.unique_name}}</p>
-    <p>sub:{{userInfo.profile.sub}}</p>
-    <p>family_name:{{userInfo.profile.family_name}}</p>
-    <p>given_name:{{userInfo.profile.given_name}}</p>
-    <p>pwd_exp:{{userInfo.profile.pwd_exp}}</p>
-    <p>pwd_url:{{userInfo.profile.pwd_url}}</p>
-
-</div>
\ No newline at end of file
diff --git a/samples/JwtBearerSample/wwwroot/index.html b/samples/JwtBearerSample/wwwroot/index.html
deleted file mode 100644
index 4715ebd42..000000000
--- a/samples/JwtBearerSample/wwwroot/index.html
+++ /dev/null
@@ -1,69 +0,0 @@
-<!DOCTYPE html>
-<html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-    <title>Todo List: a SPA sample demonstrating Azure AD and ADAL JS</title>
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap-theme.min.css">
-</head>
-<body ng-app="todoApp" ng-controller="homeCtrl" role="document">
-
-
-    <div class="navbar navbar-inverse navbar-fixed-top" role="navigation">
-        <div class="container">
-            <div class="navbar-header">
-                <button type="button" class="navbar-toggle collapsed"
-                        data-toggle="collapse"
-                        data-target=".navbar-collapse">
-
-                    <span class="icon-bar"></span>
-                    <span class="icon-bar"></span>
-                    <span class="icon-bar"></span>
-                </button>
-                <a class="navbar-brand" href="#/Home">ADAL JS Sample</a>
-            </div>
-            <div class="navbar-collapse collapse">
-                <ul class="nav navbar-nav">
-                    <li ng-class="{ active: isActive('/Home') }"><a href="#/Home">Home</a></li>
-                    <li ng-class="{ active: isActive('/TodoList') }"><a href="#/TodoList">Todo List</a></li>
-                    <li ng-class="{ active: isActive('/UserData') }"><a href="#/UserData" ng-show="userInfo.isAuthenticated">User</a></li>
-                </ul>
-                <ul class="nav navbar-nav navbar-right">
-                    <li><a class="btn btn-link" ng-show="userInfo.isAuthenticated" ng-click="logout()">Logout</a></li>
-                    <li><a class="btn btn-link" ng-hide="userInfo.isAuthenticated" ng-click="login()">Login</a></li>
-                </ul>
-            </div>
-        </div>
-    </div>
-
-
-    <br />
-    <div class="container" role="main">
-        <div class="row">
-            <div class="col-xs-10 col-xs-offset-1" style="background-color:azure">
-                <div class="page-header">
-                    <h1>Todo List</h1>
-                </div>
-                <p>This sample demonstrates how to take advantage of ADAL JS for adding Azure AD authentication to your AngularJS apps.</p>
-            </div>
-        </div>
-        <div class="row">
-            <div class="col-xs-10 col-xs-offset-1">
-                <div ng-view class="panel-body">
-
-                </div>
-            </div>
-        </div>
-        <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script>
-        <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.2.25/angular.min.js"></script>
-        <script src="https://code.angularjs.org/1.2.25/angular-route.js"></script>
-        <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js"></script>
-        <script src="https://secure.aadcdn.microsoftonline-p.com/lib/1.0.0/js/adal.min.js"></script>
-        <script src="https://secure.aadcdn.microsoftonline-p.com/lib/1.0.0/js/adal-angular.min.js"></script>
-        <script src="App/Scripts/app.js"></script>
-        <script src="App/Scripts/homeCtrl.js"></script>
-        <script src="App/Scripts/userDataCtrl.js"></script>
-        <script src="App/Scripts/todoListCtrl.js"></script>
-        <script src="App/Scripts/todoListSvc.js"></script>
-    </div>
-</body>
-</html>
diff --git a/samples/OpenIdConnect.AzureAdSample/AuthPropertiesTokenCache.cs b/samples/OpenIdConnect.AzureAdSample/AuthPropertiesTokenCache.cs
deleted file mode 100644
index 7d9b39121..000000000
--- a/samples/OpenIdConnect.AzureAdSample/AuthPropertiesTokenCache.cs
+++ /dev/null
@@ -1,97 +0,0 @@
-using System;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Clients.ActiveDirectory;
-
-namespace OpenIdConnect.AzureAdSample
-{
-    public class AuthPropertiesTokenCache : TokenCache
-    {
-        private const string TokenCacheKey = ".TokenCache";
-
-        private HttpContext _httpContext;
-        private ClaimsPrincipal _principal;
-        private AuthenticationProperties _authProperties;
-        private string _signInScheme;
-
-        private AuthPropertiesTokenCache(AuthenticationProperties authProperties) : base()
-        {
-            _authProperties = authProperties;
-            BeforeAccess = BeforeAccessNotificationWithProperties;
-            AfterAccess = AfterAccessNotificationWithProperties;
-            BeforeWrite = BeforeWriteNotification;
-        }
-
-        private AuthPropertiesTokenCache(HttpContext httpContext, string signInScheme) : base()
-        {
-            _httpContext = httpContext;
-            _signInScheme = signInScheme;
-            BeforeAccess = BeforeAccessNotificationWithContext;
-            AfterAccess = AfterAccessNotificationWithContext;
-            BeforeWrite = BeforeWriteNotification;
-        }
-
-        public static TokenCache ForCodeRedemption(AuthenticationProperties authProperties)
-        {
-            return new AuthPropertiesTokenCache(authProperties);
-        }
-
-        public static TokenCache ForApiCalls(HttpContext httpContext,
-            string signInScheme = CookieAuthenticationDefaults.AuthenticationScheme)
-        {
-            return new AuthPropertiesTokenCache(httpContext, signInScheme);
-        }
-
-        private void BeforeAccessNotificationWithProperties(TokenCacheNotificationArgs args)
-        {
-            string cachedTokensText;
-            if (_authProperties.Items.TryGetValue(TokenCacheKey, out cachedTokensText))
-            {
-                var cachedTokens = Convert.FromBase64String(cachedTokensText);
-                Deserialize(cachedTokens);
-            }
-        }
-
-        private void BeforeAccessNotificationWithContext(TokenCacheNotificationArgs args)
-        {
-            // Retrieve the auth session with the cached tokens
-            var result = _httpContext.AuthenticateAsync(_signInScheme).Result;
-            _authProperties = result.Ticket.Properties;
-            _principal = result.Ticket.Principal;
-
-            BeforeAccessNotificationWithProperties(args);
-        }
-
-        private void AfterAccessNotificationWithProperties(TokenCacheNotificationArgs args)
-        {
-            // if state changed
-            if (HasStateChanged)
-            {
-                var cachedTokens = Serialize();
-                var cachedTokensText = Convert.ToBase64String(cachedTokens);
-                _authProperties.Items[TokenCacheKey] = cachedTokensText;
-            }
-        }
-
-        private void AfterAccessNotificationWithContext(TokenCacheNotificationArgs args)
-        {
-            // if state changed
-            if (HasStateChanged)
-            {
-                AfterAccessNotificationWithProperties(args);
-
-                var cachedTokens = Serialize();
-                var cachedTokensText = Convert.ToBase64String(cachedTokens);
-                _authProperties.Items[TokenCacheKey] = cachedTokensText;
-                _httpContext.SignInAsync(_signInScheme, _principal, _authProperties).Wait();
-            }
-        }
-
-        private void BeforeWriteNotification(TokenCacheNotificationArgs args)
-        {
-            // if you want to ensure that no concurrent write take place, use this notification to place a lock on the entry
-        }
-    }
-}
diff --git a/samples/OpenIdConnect.AzureAdSample/OpenIdConnect.AzureAdSample.csproj b/samples/OpenIdConnect.AzureAdSample/OpenIdConnect.AzureAdSample.csproj
deleted file mode 100644
index 61754b60b..000000000
--- a/samples/OpenIdConnect.AzureAdSample/OpenIdConnect.AzureAdSample.csproj
+++ /dev/null
@@ -1,23 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <UserSecretsId>aspnet5-OpenIdConnectSample-20151210110318</UserSecretsId>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.OpenIdConnect\Microsoft.AspNetCore.Authentication.OpenIdConnect.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Server.IISIntegration" Version="$(MicrosoftAspNetCoreServerIISIntegrationPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel" Version="$(MicrosoftAspNetCoreServerKestrelPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="$(MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.UserSecrets" Version="$(MicrosoftExtensionsConfigurationUserSecretsPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Diagnostics" Version="$(MicrosoftAspNetCoreDiagnosticsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="$(MicrosoftExtensionsLoggingConsolePackageVersion)" />
-    <PackageReference Include="Microsoft.IdentityModel.Clients.ActiveDirectory" Version="$(MicrosoftIdentityModelClientsActiveDirectoryPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/samples/OpenIdConnect.AzureAdSample/Program.cs b/samples/OpenIdConnect.AzureAdSample/Program.cs
deleted file mode 100644
index 0e1285a9c..000000000
--- a/samples/OpenIdConnect.AzureAdSample/Program.cs
+++ /dev/null
@@ -1,27 +0,0 @@
-using System.IO;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.Extensions.Logging;
-
-namespace OpenIdConnect.AzureAdSample
-{
-    public static class Program
-    {
-        public static void Main(string[] args)
-        {
-            var host = new WebHostBuilder()
-                .ConfigureLogging(factory =>
-                {
-                    factory.AddConsole();
-                    factory.AddFilter("Console", level => level >= LogLevel.Information);
-                })
-                .UseKestrel()
-                .UseUrls("http://localhost:42023")
-                .UseContentRoot(Directory.GetCurrentDirectory())
-                .UseIISIntegration()
-                .UseStartup<Startup>()
-                .Build();
-
-            host.Run();
-        }
-    }
-}
diff --git a/samples/OpenIdConnect.AzureAdSample/Properties/launchSettings.json b/samples/OpenIdConnect.AzureAdSample/Properties/launchSettings.json
deleted file mode 100644
index e6436fee2..000000000
--- a/samples/OpenIdConnect.AzureAdSample/Properties/launchSettings.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "iisSettings": {
-    "windowsAuthentication": false,
-    "anonymousAuthentication": true,
-    "iisExpress": {
-      "applicationUrl": "http://localhost:42023",
-      "sslPort": 0
-    }
-  },
-  "profiles": {
-    "IIS Express": {
-      "commandName": "IISExpress",
-      "launchBrowser": true,
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    },
-    "OpenIdConnect": {
-      "commandName": "Project",
-      "launchBrowser": true,
-      "applicationUrl": "http://localhost:42023",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/samples/OpenIdConnect.AzureAdSample/Readme.md b/samples/OpenIdConnect.AzureAdSample/Readme.md
deleted file mode 100644
index 767e336ac..000000000
--- a/samples/OpenIdConnect.AzureAdSample/Readme.md
+++ /dev/null
@@ -1,20 +0,0 @@
-# How to set up the sample locally
-
-## Set up [Azure Active Directory](https://azure.microsoft.com/en-us/documentation/services/active-directory/)
-
-1. Create your own Azure Active Directory (AD). Save the "tenent name".
-2. Add a new Application: in the Azure AD portal, select Application, and click Add in the drawer.
-3. Set the sign-on url to `http://localhost:42023`.
-4. Select the newly created Application, navigate to the Configure tab.
-5. Find and save the "Client Id"
-8. In the keys section add a new key. A key value will be generated. Save the value as "Client Secret"
-
-## Configure the local environment
-1. Set environment ASPNETCORE_ENVIRONMENT to DEVELOPMENT. ([Working with Multiple Environments](https://docs.asp.net/en/latest/fundamentals/environments.html))
-2. Set up user secrets:
-```
-dotnet user-secrets set oidc:clientid <Client Id>
-dotnet user-secrets set oidc:clientsecret <Client Secret>
-dotnet user-secrets set oidc:authority https://login.windows.net/<Tenent Name>.onmicrosoft.com
-```
-
diff --git a/samples/OpenIdConnect.AzureAdSample/Startup.cs b/samples/OpenIdConnect.AzureAdSample/Startup.cs
deleted file mode 100644
index c3fa3c719..000000000
--- a/samples/OpenIdConnect.AzureAdSample/Startup.cs
+++ /dev/null
@@ -1,203 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Extensions;
-using Microsoft.Extensions.Configuration;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.IdentityModel.Clients.ActiveDirectory;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace OpenIdConnect.AzureAdSample
-{
-    public class Startup
-    {
-        public Startup(IHostingEnvironment env)
-        {
-            var builder = new ConfigurationBuilder()
-                .SetBasePath(env.ContentRootPath);
-
-            if (env.IsDevelopment())
-            {
-                // For more details on using the user secret store see http://go.microsoft.com/fwlink/?LinkID=532709
-                builder.AddUserSecrets<Startup>();
-            }
-
-            builder.AddEnvironmentVariables();
-            Configuration = builder.Build();
-        }
-
-        public IConfiguration Configuration { get; set; }
-
-        private string ClientId => Configuration["oidc:clientid"];
-        private string ClientSecret => Configuration["oidc:clientsecret"];
-        private string Authority => Configuration["oidc:authority"];
-        private string Resource => "https://graph.windows.net";
-
-        public void ConfigureServices(IServiceCollection services)
-        {
-            services.AddAuthentication(sharedOptions =>
-            {
-                sharedOptions.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                sharedOptions.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
-            })
-                .AddCookie()
-                .AddOpenIdConnect(OpenIdConnectDefaults.AuthenticationScheme, "AAD", o =>
-            {
-                o.ClientId = ClientId;
-                o.ClientSecret = ClientSecret; // for code flow
-                o.Authority = Authority;
-                o.ResponseType = OpenIdConnectResponseType.CodeIdToken;
-                o.SignedOutRedirectUri = "/signed-out";
-                // GetClaimsFromUserInfoEndpoint = true,
-                o.Events = new OpenIdConnectEvents()
-                {
-                    OnAuthorizationCodeReceived = async context =>
-                    {
-                        var request = context.HttpContext.Request;
-                        var currentUri = UriHelper.BuildAbsolute(request.Scheme, request.Host, request.PathBase, request.Path);
-                        var credential = new ClientCredential(ClientId, ClientSecret);
-                        var authContext = new AuthenticationContext(Authority, AuthPropertiesTokenCache.ForCodeRedemption(context.Properties));
-
-                        var result = await authContext.AcquireTokenByAuthorizationCodeAsync(
-                            context.ProtocolMessage.Code, new Uri(currentUri), credential, Resource);
-
-                        context.HandleCodeRedemption(result.AccessToken, result.IdToken);
-                    }
-                };
-            });
-        }
-
-        public void Configure(IApplicationBuilder app)
-        {
-            app.UseDeveloperExceptionPage();
-
-            app.UseAuthentication();
-
-            app.Run(async context =>
-            {
-                if (context.Request.Path.Equals("/signin"))
-                {
-                    if (context.User.Identities.Any(identity => identity.IsAuthenticated))
-                    {
-                        // User has already signed in
-                        context.Response.Redirect("/");
-                        return;
-                    }
-
-                    await context.ChallengeAsync(new AuthenticationProperties { RedirectUri = "/" });
-                }
-                else if (context.Request.Path.Equals("/signout"))
-                {
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await WriteHtmlAsync(context.Response,
-                        async response =>
-                        {
-                            await response.WriteAsync($"<h1>Signed out locally: {HtmlEncode(context.User.Identity.Name)}</h1>");
-                            await response.WriteAsync("<a class=\"btn btn-primary\" href=\"/\">Sign In</a>");
-                        });
-                }
-                else if (context.Request.Path.Equals("/signout-remote"))
-                {
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await context.SignOutAsync(OpenIdConnectDefaults.AuthenticationScheme);
-                }
-                else if (context.Request.Path.Equals("/signed-out"))
-                {
-                    await WriteHtmlAsync(context.Response, 
-                        async response =>
-                        {
-                            await response.WriteAsync($"<h1>You have been signed out.</h1>");
-                            await response.WriteAsync("<a class=\"btn btn-primary\" href=\"/signin\">Sign In</a>");
-                        });
-                }
-                else if (context.Request.Path.Equals("/remote-signedout"))
-                {
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await WriteHtmlAsync(context.Response,
-                        async response =>
-                        {
-                            await response.WriteAsync($"<h1>Signed out remotely: {HtmlEncode(context.User.Identity.Name)}</h1>");
-                            await response.WriteAsync("<a class=\"btn btn-primary\" href=\"/\">Sign In</a>");
-                        });
-                }
-                else
-                {
-                    if (!context.User.Identities.Any(identity => identity.IsAuthenticated))
-                    {
-                        await context.ChallengeAsync(new AuthenticationProperties { RedirectUri = "/" });
-                        return;
-                    }
-
-                    await WriteHtmlAsync(context.Response, async response =>
-                    {
-                        await response.WriteAsync($"<h1>Hello Authenticated User {HtmlEncode(context.User.Identity.Name)}</h1>");
-                        await response.WriteAsync("<a class=\"btn btn-default\" href=\"/signout\">Sign Out Locally</a>");
-                        await response.WriteAsync("<a class=\"btn btn-default\" href=\"/signout-remote\">Sign Out Remotely</a>");
-
-                        await response.WriteAsync("<h2>Claims:</h2>");
-                        await WriteTableHeader(response, new string[] { "Claim Type", "Value" }, context.User.Claims.Select(c => new string[] { c.Type, c.Value }));
-
-                        await response.WriteAsync("<h2>Tokens:</h2>");
-                        try
-                        {
-                            // Use ADAL to get the right token
-                            var authContext = new AuthenticationContext(Authority, AuthPropertiesTokenCache.ForApiCalls(context, CookieAuthenticationDefaults.AuthenticationScheme));
-                            var credential = new ClientCredential(ClientId, ClientSecret);
-                            string userObjectID = context.User.FindFirst("http://schemas.microsoft.com/identity/claims/objectidentifier").Value;
-                            var result = await authContext.AcquireTokenSilentAsync(Resource, credential, new UserIdentifier(userObjectID, UserIdentifierType.UniqueId));
-
-                            await response.WriteAsync($"<h3>access_token</h3><code>{HtmlEncode(result.AccessToken)}</code><br>");
-                        }
-                        catch (Exception ex)
-                        {
-                            await response.WriteAsync($"AquireToken error: {ex.Message}");
-                        }
-                    });
-                }
-            });
-        }
-
-        private static async Task WriteHtmlAsync(HttpResponse response, Func<HttpResponse, Task> writeContent)
-        {
-            var bootstrap = "<link rel=\"stylesheet\" href=\"https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css\" integrity=\"sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u\" crossorigin=\"anonymous\">";
-
-            response.ContentType = "text/html";
-            await response.WriteAsync($"<html><head>{bootstrap}</head><body><div class=\"container\">");
-            await writeContent(response);
-            await response.WriteAsync("</div></body></html>");
-        }
-
-        private static async Task WriteTableHeader(HttpResponse response, IEnumerable<string> columns, IEnumerable<IEnumerable<string>> data)
-        {
-            await response.WriteAsync("<table class=\"table table-condensed\">");
-            await response.WriteAsync("<tr>");
-            foreach (var column in columns)
-            {
-                await response.WriteAsync($"<th>{HtmlEncode(column)}</th>");
-            }
-            await response.WriteAsync("</tr>");
-            foreach (var row in data)
-            {
-                await response.WriteAsync("<tr>");
-                foreach (var column in row)
-                {
-                    await response.WriteAsync($"<td>{HtmlEncode(column)}</td>");
-                }
-                await response.WriteAsync("</tr>");
-            }
-            await response.WriteAsync("</table>");
-        }
-
-        private static string HtmlEncode(string content) =>
-            string.IsNullOrEmpty(content) ? string.Empty : HtmlEncoder.Default.Encode(content);
-    }
-}
-
diff --git a/samples/OpenIdConnectSample/OpenIdConnectSample.csproj b/samples/OpenIdConnectSample/OpenIdConnectSample.csproj
deleted file mode 100644
index 137ee47ba..000000000
--- a/samples/OpenIdConnectSample/OpenIdConnectSample.csproj
+++ /dev/null
@@ -1,33 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <UserSecretsId>aspnet5-OpenIdConnectSample-20151210110318</UserSecretsId>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <None Remove="compiler\resources\cert.pfx" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.OpenIdConnect\Microsoft.AspNetCore.Authentication.OpenIdConnect.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Server.IISIntegration" Version="$(MicrosoftAspNetCoreServerIISIntegrationPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel" Version="$(MicrosoftAspNetCoreServerKestrelPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel.Https" Version="$(MicrosoftAspNetCoreServerKestrelHttpsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="$(MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.UserSecrets" Version="$(MicrosoftExtensionsConfigurationUserSecretsPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Diagnostics" Version="$(MicrosoftAspNetCoreDiagnosticsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.FileProviders.Embedded" Version="$(MicrosoftExtensionsFileProvidersEmbeddedPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="$(MicrosoftExtensionsLoggingConsolePackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Debug" Version="$(MicrosoftExtensionsLoggingDebugPackageVersion)" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <EmbeddedResource Include="compiler\resources\cert.pfx" />
-  </ItemGroup>
-
-</Project>
diff --git a/samples/OpenIdConnectSample/Program.cs b/samples/OpenIdConnectSample/Program.cs
deleted file mode 100644
index 87e775508..000000000
--- a/samples/OpenIdConnectSample/Program.cs
+++ /dev/null
@@ -1,59 +0,0 @@
-using System;
-using System.IO;
-using System.Net;
-using System.Reflection;
-using System.Security.Cryptography.X509Certificates;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.Extensions.FileProviders;
-using Microsoft.Extensions.Logging;
-
-namespace OpenIdConnectSample
-{
-    public static class Program
-    {
-        public static void Main(string[] args)
-        {
-            var host = new WebHostBuilder()
-                .ConfigureLogging(factory =>
-                {
-                    factory.AddConsole();
-                    factory.AddDebug();
-                    factory.AddFilter("Console", level => level >= LogLevel.Information);
-                    factory.AddFilter("Debug", level => level >= LogLevel.Information);
-                })
-                .UseKestrel(options =>
-                {
-                    options.Listen(IPAddress.Loopback, 44318, listenOptions =>
-                    {
-                        // Configure SSL
-                        var serverCertificate = LoadCertificate();
-                        listenOptions.UseHttps(serverCertificate);
-                    });
-                })
-                .UseContentRoot(Directory.GetCurrentDirectory())
-                .UseIISIntegration()
-                .UseStartup<Startup>()
-                .Build();
-
-            host.Run();
-        }
-
-        private static X509Certificate2 LoadCertificate()
-        {
-            var assembly = typeof(Startup).GetTypeInfo().Assembly;
-            var embeddedFileProvider = new EmbeddedFileProvider(assembly, "OpenIdConnectSample");
-            var certificateFileInfo = embeddedFileProvider.GetFileInfo("compiler/resources/cert.pfx");
-            using (var certificateStream = certificateFileInfo.CreateReadStream())
-            {
-                byte[] certificatePayload;
-                using (var memoryStream = new MemoryStream())
-                {
-                    certificateStream.CopyTo(memoryStream);
-                    certificatePayload = memoryStream.ToArray();
-                }
-
-                return new X509Certificate2(certificatePayload, "testPassword");
-            }
-        }
-    }
-}
diff --git a/samples/OpenIdConnectSample/Properties/launchSettings.json b/samples/OpenIdConnectSample/Properties/launchSettings.json
deleted file mode 100644
index 058fa4c5d..000000000
--- a/samples/OpenIdConnectSample/Properties/launchSettings.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  "iisSettings": {
-    "windowsAuthentication": false,
-    "anonymousAuthentication": true,
-    "iisExpress": {
-      "applicationUrl": "http://localhost:42023",
-      "sslPort": 44318
-    }
-  },
-  "profiles": {
-    "IIS Express": {
-      "commandName": "IISExpress",
-      "launchBrowser": true,
-      "launchUrl": "https://localhost:44318/",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    },
-    "OpenIdConnectSample": {
-      "commandName": "Project",
-      "launchBrowser": true,
-      "applicationUrl": "https://localhost:44318/",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/samples/OpenIdConnectSample/Readme.md b/samples/OpenIdConnectSample/Readme.md
deleted file mode 100644
index 846e3f8e6..000000000
--- a/samples/OpenIdConnectSample/Readme.md
+++ /dev/null
@@ -1,44 +0,0 @@
-# How to set up the sample locally
-
-The OpenIdConnect sample supports multilpe authentication providers. In these instruction, we will explore how to set up this sample with both Azure Active Directory and Google Identity Platform.
-
-## Determine your development environment and a few key variables
-
-This sample is configured to run on port __44318__ locally. In Visual Studio, the setting is carried out in `.\properties\launchSettings.json`. When the application is run from command line, the URL is coded in `Program.cs`.
-
-If the application is run from command line or terminal, environment variable ASPNETCORE_ENVIRONMENT should be set to DEVELOPMENT to enable user secret.
-
-## Configure the Authorization server
-
-### Configure with Azure Active Directory
-
-1. Set up a new Azure Active Directory (AAD) in your Azure Subscription.
-2. Open the newly created AAD in Azure web portal.
-3. Navigate to the Applications tab.
-4. Add a new Application to the AAD. Set the "Sign-on URL" to sample application's URL.
-5. Naigate to the Application, and click the Configure tab.
-6. Find and save the "Client Id".
-7. Add a new key in the "Keys" section. Save value of the key, which is the "Client Secret".
-8. Click the "View Endpoints" on the drawer, a dialog will shows six endpoint URLs. Copy the "OAuth 2.0 Authorization Endpoint" to a text editor and remove the "/oauth2/authorize" from the string. The remaining part is the __authority URL__. It looks like `https://login.microsoftonline.com/<guid>`.
-
-### Configure with Google Identity Platform 
-
-1. Create a new project through [Google APIs](https://console.developers.google.com).
-2. In the sidebar choose "Credentials".
-3. Navigate to "OAuth consent screen" tab, fill in the project name and save.
-4. Navigate to "Credentials" tab. Click "Create credentials". Choose "OAuth client ID". 
-5. Select "Web application" as the application type. Fill in the "Authorized redirect URIs" with `https://localhost:44318/signin-oidc`.
-6. Save the "Client ID" and "Client Secret" shown in the dialog.
-7. The "Authority URL" for Google Authentication is `https://accounts.google.com/`.
-
-## Configure the sample application
-
-1. Restore the application.
-2. Set user secrets:
-
- ```
-dotnet user-secrets set oidc:clientid <Client Id>
-dotnet user-secrets set oidc:clientsecret <Client Secret>
-dotnet user-secrets set oidc:authority <Authority URL>
-```
-
diff --git a/samples/OpenIdConnectSample/Startup.cs b/samples/OpenIdConnectSample/Startup.cs
deleted file mode 100644
index a2b5a9a5c..000000000
--- a/samples/OpenIdConnectSample/Startup.cs
+++ /dev/null
@@ -1,308 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Globalization;
-using System.IdentityModel.Tokens.Jwt;
-using System.Linq;
-using System.Net.Http;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Configuration;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Options;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Newtonsoft.Json.Linq;
-
-namespace OpenIdConnectSample
-{
-    public class Startup
-    {
-        public Startup(IHostingEnvironment env)
-        {
-            Environment = env;
-
-            var builder = new ConfigurationBuilder()
-                .SetBasePath(env.ContentRootPath);
-
-            if (env.IsDevelopment())
-            {
-                // For more details on using the user secret store see http://go.microsoft.com/fwlink/?LinkID=532709
-                builder.AddUserSecrets<Startup>();
-            }
-
-            builder.AddEnvironmentVariables();
-            Configuration = builder.Build();
-        }
-
-        public IConfiguration Configuration { get; set; }
-
-        public IHostingEnvironment Environment { get; set; }
-
-        public void ConfigureServices(IServiceCollection services)
-        {
-            JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear();
-
-            services.AddAuthentication(sharedOptions =>
-            {
-                sharedOptions.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                sharedOptions.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                sharedOptions.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
-            })
-                .AddCookie()
-                .AddOpenIdConnect(o =>
-            {
-                o.ClientId = Configuration["oidc:clientid"];
-                o.ClientSecret = Configuration["oidc:clientsecret"]; // for code flow
-                o.Authority = Configuration["oidc:authority"];
-
-                o.ResponseType = OpenIdConnectResponseType.CodeIdToken;
-                o.SaveTokens = true;
-                o.GetClaimsFromUserInfoEndpoint = true;
-                o.AccessDeniedPath = "/access-denied-from-remote";
-
-                o.ClaimActions.MapAllExcept("aud", "iss", "iat", "nbf", "exp", "aio", "c_hash", "uti", "nonce");
-
-                o.Events = new OpenIdConnectEvents()
-                {
-                    OnAuthenticationFailed = c =>
-                    {
-                        c.HandleResponse();
-
-                        c.Response.StatusCode = 500;
-                        c.Response.ContentType = "text/plain";
-                        if (Environment.IsDevelopment())
-                        {
-                            // Debug only, in production do not share exceptions with the remote host.
-                            return c.Response.WriteAsync(c.Exception.ToString());
-                        }
-                        return c.Response.WriteAsync("An error occurred processing your authentication.");
-                    }
-                };
-            });
-        }
-
-        public void Configure(IApplicationBuilder app, IOptionsMonitor<OpenIdConnectOptions> optionsMonitor)
-        {
-            app.UseDeveloperExceptionPage();
-            app.UseAuthentication();
-
-            app.Run(async context =>
-            {
-                var response = context.Response;
-
-                if (context.Request.Path.Equals("/signedout"))
-                {
-                    await WriteHtmlAsync(response, async res =>
-                    {
-                        await res.WriteAsync($"<h1>You have been signed out.</h1>");
-                        await res.WriteAsync("<a class=\"btn btn-default\" href=\"/\">Home</a>");
-                    });
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/signout"))
-                {
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await WriteHtmlAsync(response, async res =>
-                    {
-                        await res.WriteAsync($"<h1>Signed out {HtmlEncode(context.User.Identity.Name)}</h1>");
-                        await res.WriteAsync("<a class=\"btn btn-default\" href=\"/\">Home</a>");
-                    });
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/signout-remote"))
-                {
-                    // Redirects
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await context.SignOutAsync(OpenIdConnectDefaults.AuthenticationScheme, new AuthenticationProperties()
-                    {
-                        RedirectUri = "/signedout"
-                    });
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/access-denied-from-remote"))
-                {
-                    await WriteHtmlAsync(response, async res =>
-                    {
-                        await res.WriteAsync($"<h1>Access Denied error received from the remote authorization server</h1>");
-                        await res.WriteAsync("<a class=\"btn btn-default\" href=\"/\">Home</a>");
-                    });
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/Account/AccessDenied"))
-                {
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await WriteHtmlAsync(response, async res =>
-                    {
-                        await res.WriteAsync($"<h1>Access Denied for user {HtmlEncode(context.User.Identity.Name)} to resource '{HtmlEncode(context.Request.Query["ReturnUrl"])}'</h1>");
-                        await res.WriteAsync("<a class=\"btn btn-default\" href=\"/signout\">Sign Out</a>");
-                        await res.WriteAsync("<a class=\"btn btn-default\" href=\"/\">Home</a>");
-                    });
-                    return;
-                }
-
-                // DefaultAuthenticateScheme causes User to be set
-                // var user = context.User;
-
-                // This is what [Authorize] calls
-                var userResult = await context.AuthenticateAsync();
-                var user = userResult.Principal;
-                var props = userResult.Properties;
-
-                // This is what [Authorize(ActiveAuthenticationSchemes = OpenIdConnectDefaults.AuthenticationScheme)] calls
-                // var user = await context.AuthenticateAsync(OpenIdConnectDefaults.AuthenticationScheme);
-
-                // Not authenticated
-                if (user == null || !user.Identities.Any(identity => identity.IsAuthenticated))
-                {
-                    // This is what [Authorize] calls
-                    await context.ChallengeAsync();
-
-                    // This is what [Authorize(ActiveAuthenticationSchemes = OpenIdConnectDefaults.AuthenticationScheme)] calls
-                    // await context.ChallengeAsync(OpenIdConnectDefaults.AuthenticationScheme);
-
-                    return;
-                }
-
-                // Authenticated, but not authorized
-                if (context.Request.Path.Equals("/restricted") && !user.Identities.Any(identity => identity.HasClaim("special", "true")))
-                {
-                    await context.ForbidAsync();
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/refresh"))
-                {
-                    var refreshToken = props.GetTokenValue("refresh_token");
-
-                    if (string.IsNullOrEmpty(refreshToken))
-                    {
-                        await WriteHtmlAsync(response, async res =>
-                        {
-                            await res.WriteAsync($"No refresh_token is available.<br>");
-                            await res.WriteAsync("<a class=\"btn btn-link\" href=\"/signout\">Sign Out</a>");
-                        });
-
-                        return;
-                    }
-
-                    var options = optionsMonitor.Get(OpenIdConnectDefaults.AuthenticationScheme);
-                    var metadata = await options.ConfigurationManager.GetConfigurationAsync(context.RequestAborted);
-
-                    var pairs = new Dictionary<string, string>()
-                    {
-                        { "client_id", options.ClientId },
-                        { "client_secret", options.ClientSecret },
-                        { "grant_type", "refresh_token" },
-                        { "refresh_token", refreshToken }
-                    };
-                    var content = new FormUrlEncodedContent(pairs);
-                    var tokenResponse = await options.Backchannel.PostAsync(metadata.TokenEndpoint, content, context.RequestAborted);
-                    tokenResponse.EnsureSuccessStatusCode();
-
-                    var payload = JObject.Parse(await tokenResponse.Content.ReadAsStringAsync());
-
-                    // Persist the new acess token
-                    props.UpdateTokenValue("access_token", payload.Value<string>("access_token"));
-                    props.UpdateTokenValue("refresh_token", payload.Value<string>("refresh_token"));
-                    if (int.TryParse(payload.Value<string>("expires_in"), NumberStyles.Integer, CultureInfo.InvariantCulture, out var seconds))
-                    {
-                        var expiresAt = DateTimeOffset.UtcNow + TimeSpan.FromSeconds(seconds);
-                        props.UpdateTokenValue("expires_at", expiresAt.ToString("o", CultureInfo.InvariantCulture));
-                    }
-                    await context.SignInAsync(user, props);
-
-                    await WriteHtmlAsync(response, async res =>
-                    {
-                        await res.WriteAsync($"<h1>Refreshed.</h1>");
-                        await res.WriteAsync("<a class=\"btn btn-default\" href=\"/refresh\">Refresh tokens</a>");
-                        await res.WriteAsync("<a class=\"btn btn-default\" href=\"/\">Home</a>");
-
-                        await res.WriteAsync("<h2>Tokens:</h2>");
-                        await WriteTableHeader(res, new string[] { "Token Type", "Value" }, props.GetTokens().Select(token => new string[] { token.Name, token.Value }));
-
-                        await res.WriteAsync("<h2>Payload:</h2>");
-                        await res.WriteAsync(HtmlEncoder.Default.Encode(payload.ToString()).Replace(",", ",<br>") + "<br>");
-                    });
-
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/login-challenge"))
-                {
-                    // Challenge the user authentication, and force a login prompt by overwriting the
-                    // "prompt". This could be used for example to require the user to re-enter their
-                    // credentials at the authentication provider, to add an extra confirmation layer.
-                    await context.ChallengeAsync(OpenIdConnectDefaults.AuthenticationScheme, new OpenIdConnectChallengeProperties()
-                    {
-                        Prompt = "login",
-
-                        // it is also possible to specify different scopes, e.g.
-                        // Scope = new string[] { "openid", "profile", "other" }
-                    });
-
-                    return;
-                }
-
-                await WriteHtmlAsync(response, async res =>
-                {
-                    await res.WriteAsync($"<h1>Hello Authenticated User {HtmlEncode(user.Identity.Name)}</h1>");
-                    await res.WriteAsync("<a class=\"btn btn-default\" href=\"/refresh\">Refresh tokens</a>");
-                    await res.WriteAsync("<a class=\"btn btn-default\" href=\"/restricted\">Restricted</a>");
-                    await res.WriteAsync("<a class=\"btn btn-default\" href=\"/login-challenge\">Login challenge</a>");
-                    await res.WriteAsync("<a class=\"btn btn-default\" href=\"/signout\">Sign Out</a>");
-                    await res.WriteAsync("<a class=\"btn btn-default\" href=\"/signout-remote\">Sign Out Remote</a>");
-
-                    await res.WriteAsync("<h2>Claims:</h2>");
-                    await WriteTableHeader(res, new string[] { "Claim Type", "Value" }, context.User.Claims.Select(c => new string[] { c.Type, c.Value }));
-
-                    await res.WriteAsync("<h2>Tokens:</h2>");
-                    await WriteTableHeader(res, new string[] { "Token Type", "Value" }, props.GetTokens().Select(token => new string[] { token.Name, token.Value }));
-                });
-            });
-        }
-
-        private static async Task WriteHtmlAsync(HttpResponse response, Func<HttpResponse, Task> writeContent)
-        {
-            var bootstrap = "<link rel=\"stylesheet\" href=\"https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css\" integrity=\"sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u\" crossorigin=\"anonymous\">";
-
-            response.ContentType = "text/html";
-            await response.WriteAsync($"<html><head>{bootstrap}</head><body><div class=\"container\">");
-            await writeContent(response);
-            await response.WriteAsync("</div></body></html>");
-        }
-
-        private static async Task WriteTableHeader(HttpResponse response, IEnumerable<string> columns, IEnumerable<IEnumerable<string>> data)
-        {
-            await response.WriteAsync("<table class=\"table table-condensed\">");
-            await response.WriteAsync("<tr>");
-            foreach (var column in columns)
-            {
-                await response.WriteAsync($"<th>{HtmlEncode(column)}</th>");
-            }
-            await response.WriteAsync("</tr>");
-            foreach (var row in data)
-            {
-                await response.WriteAsync("<tr>");
-                foreach (var column in row)
-                {
-                    await response.WriteAsync($"<td>{HtmlEncode(column)}</td>");
-                }
-                await response.WriteAsync("</tr>");
-            }
-            await response.WriteAsync("</table>");
-        }
-
-        private static string HtmlEncode(string content) =>
-            string.IsNullOrEmpty(content) ? string.Empty : HtmlEncoder.Default.Encode(content);
-    }
-}
-
diff --git a/samples/OpenIdConnectSample/compiler/resources/cert.pfx b/samples/OpenIdConnectSample/compiler/resources/cert.pfx
deleted file mode 100644
index 7118908c2..000000000
Binary files a/samples/OpenIdConnectSample/compiler/resources/cert.pfx and /dev/null differ
diff --git a/samples/SocialSample/Program.cs b/samples/SocialSample/Program.cs
deleted file mode 100644
index a712b6c03..000000000
--- a/samples/SocialSample/Program.cs
+++ /dev/null
@@ -1,57 +0,0 @@
-using System;
-using System.IO;
-using System.Net;
-using System.Reflection;
-using System.Security.Cryptography.X509Certificates;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.Extensions.FileProviders;
-using Microsoft.Extensions.Logging;
-
-namespace SocialSample
-{
-    public static class Program
-    {
-        public static void Main(string[] args)
-        {
-            var host = new WebHostBuilder()
-                .ConfigureLogging(factory =>
-                {
-                    factory.AddConsole();
-                    factory.AddFilter("Console", level => level >= LogLevel.Information);
-                })
-                .UseKestrel(options =>
-                {
-                    options.Listen(IPAddress.Loopback, 44318, listenOptions =>
-                    {
-                        // Configure SSL
-                        var serverCertificate = LoadCertificate();
-                        listenOptions.UseHttps(serverCertificate);
-                    });
-                })
-                .UseContentRoot(Directory.GetCurrentDirectory())
-                .UseIISIntegration()
-                .UseStartup<Startup>()
-                .Build();
-
-            host.Run();
-        }
-
-        private static X509Certificate2 LoadCertificate()
-        {
-            var socialSampleAssembly = typeof(Startup).GetTypeInfo().Assembly;
-            var embeddedFileProvider = new EmbeddedFileProvider(socialSampleAssembly, "SocialSample");
-            var certificateFileInfo = embeddedFileProvider.GetFileInfo("compiler/resources/cert.pfx");
-            using (var certificateStream = certificateFileInfo.CreateReadStream())
-            {
-                byte[] certificatePayload;
-                using (var memoryStream = new MemoryStream())
-                {
-                    certificateStream.CopyTo(memoryStream);
-                    certificatePayload = memoryStream.ToArray();
-                }
-
-                return new X509Certificate2(certificatePayload, "testPassword");
-            }
-        }
-    }
-}
diff --git a/samples/SocialSample/Properties/launchSettings.json b/samples/SocialSample/Properties/launchSettings.json
deleted file mode 100644
index 30bf2e5f6..000000000
--- a/samples/SocialSample/Properties/launchSettings.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  "iisSettings": {
-    "windowsAuthentication": false,
-    "anonymousAuthentication": true,
-    "iisExpress": {
-      "applicationUrl": "http://localhost:54540",
-      "sslPort": 44318
-    }
-  },
-  "profiles": {
-    "IIS Express": {
-      "commandName": "IISExpress",
-      "launchBrowser": true,
-      "launchUrl": "https://localhost:44318/",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    },
-    "SocialSample": {
-      "commandName": "Project",
-      "launchBrowser": true,
-      "applicationUrl": "https://localhost:44318/",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/samples/SocialSample/SocialSample.csproj b/samples/SocialSample/SocialSample.csproj
deleted file mode 100644
index e1e2262b0..000000000
--- a/samples/SocialSample/SocialSample.csproj
+++ /dev/null
@@ -1,36 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <UserSecretsId>aspnet5-SocialSample-20151210111056</UserSecretsId>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <None Remove="compiler\resources\cert.pfx" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <EmbeddedResource Include="compiler\resources\cert.pfx" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Facebook\Microsoft.AspNetCore.Authentication.Facebook.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Google\Microsoft.AspNetCore.Authentication.Google.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.MicrosoftAccount\Microsoft.AspNetCore.Authentication.MicrosoftAccount.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Twitter\Microsoft.AspNetCore.Authentication.Twitter.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="$(MicrosoftAspNetCoreDataProtectionPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.IISIntegration" Version="$(MicrosoftAspNetCoreServerIISIntegrationPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel" Version="$(MicrosoftAspNetCoreServerKestrelPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel.Https" Version="$(MicrosoftAspNetCoreServerKestrelHttpsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="$(MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.UserSecrets" Version="$(MicrosoftExtensionsConfigurationUserSecretsPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Diagnostics" Version="$(MicrosoftAspNetCoreDiagnosticsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.FileProviders.Embedded" Version="$(MicrosoftExtensionsFileProvidersEmbeddedPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="$(MicrosoftExtensionsLoggingConsolePackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/samples/SocialSample/Startup.cs b/samples/SocialSample/Startup.cs
deleted file mode 100644
index b5032072b..000000000
--- a/samples/SocialSample/Startup.cs
+++ /dev/null
@@ -1,508 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Globalization;
-using System.Linq;
-using System.Net.Http;
-using System.Net.Http.Headers;
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication.Facebook;
-using Microsoft.AspNetCore.Authentication.Google;
-using Microsoft.AspNetCore.Authentication.MicrosoftAccount;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.Authentication.Twitter;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Extensions;
-using Microsoft.Extensions.Configuration;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Options;
-using Newtonsoft.Json.Linq;
-
-namespace SocialSample
-{
-    /* Note all servers must use the same address and port because these are pre-registered with the various providers. */
-    public class Startup
-    {
-        public Startup(IHostingEnvironment env)
-        {
-            var builder = new ConfigurationBuilder()
-                .SetBasePath(env.ContentRootPath)
-                .AddJsonFile("appsettings.json", optional: true);
-
-            if (env.IsDevelopment())
-            {
-                // For more details on using the user secret store see http://go.microsoft.com/fwlink/?LinkID=532709
-                builder.AddUserSecrets<Startup>();
-            }
-
-            builder.AddEnvironmentVariables();
-            Configuration = builder.Build();
-        }
-
-        public IConfiguration Configuration { get; set; }
-
-        public void ConfigureServices(IServiceCollection services)
-        {
-            if (string.IsNullOrEmpty(Configuration["facebook:appid"]))
-            {
-                // User-Secrets: https://docs.asp.net/en/latest/security/app-secrets.html
-                // See below for registration instructions for each provider.
-                throw new InvalidOperationException("User secrets must be configured for each authentication provider.");
-            }
-
-            services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
-                .AddCookie(o => o.LoginPath = new PathString("/login"))
-                // You must first create an app with Facebook and add its ID and Secret to your user-secrets.
-                // https://developers.facebook.com/apps/
-                // https://developers.facebook.com/docs/facebook-login/manually-build-a-login-flow#login
-                .AddFacebook(o =>
-            {
-                o.AppId = Configuration["facebook:appid"];
-                o.AppSecret = Configuration["facebook:appsecret"];
-                o.Scope.Add("email");
-                o.Fields.Add("name");
-                o.Fields.Add("email");
-                o.SaveTokens = true;
-                o.Events = new OAuthEvents()
-                {
-                    OnRemoteFailure = HandleOnRemoteFailure
-                };
-            })
-                // You must first create an app with Google and add its ID and Secret to your user-secrets.
-                // https://console.developers.google.com/project
-                // https://developers.google.com/identity/protocols/OAuth2WebServer
-                // https://developers.google.com/+/web/people/
-                .AddOAuth("Google-AccessToken", "Google AccessToken only", o =>
-            {
-                o.ClientId = Configuration["google:clientid"];
-                o.ClientSecret = Configuration["google:clientsecret"];
-                o.CallbackPath = new PathString("/signin-google-token");
-                o.AuthorizationEndpoint = GoogleDefaults.AuthorizationEndpoint;
-                o.TokenEndpoint = GoogleDefaults.TokenEndpoint;
-                o.Scope.Add("openid");
-                o.Scope.Add("profile");
-                o.Scope.Add("email");
-                o.SaveTokens = true;
-                o.Events = new OAuthEvents()
-                {
-                    OnRemoteFailure = HandleOnRemoteFailure
-                };
-            })
-                // You must first create an app with Google and add its ID and Secret to your user-secrets.
-                // https://console.developers.google.com/project
-                // https://developers.google.com/identity/protocols/OAuth2WebServer
-                // https://developers.google.com/+/web/people/
-                .AddGoogle(o =>
-            {
-                o.ClientId = Configuration["google:clientid"];
-                o.ClientSecret = Configuration["google:clientsecret"];
-                o.AuthorizationEndpoint += "?prompt=consent"; // Hack so we always get a refresh token, it only comes on the first authorization response
-                o.AccessType = "offline";
-                o.SaveTokens = true;
-                o.Events = new OAuthEvents()
-                {
-                    OnRemoteFailure = HandleOnRemoteFailure
-                };
-                o.ClaimActions.MapJsonSubKey("urn:google:image", "image", "url");
-                o.ClaimActions.Remove(ClaimTypes.GivenName);
-            })
-                // You must first create an app with Twitter and add its key and Secret to your user-secrets.
-                // https://apps.twitter.com/
-                // https://developer.twitter.com/en/docs/basics/authentication/api-reference/access_token
-                .AddTwitter(o =>
-            {
-                o.ConsumerKey = Configuration["twitter:consumerkey"];
-                o.ConsumerSecret = Configuration["twitter:consumersecret"];
-                // http://stackoverflow.com/questions/22627083/can-we-get-email-id-from-twitter-oauth-api/32852370#32852370
-                // http://stackoverflow.com/questions/36330675/get-users-email-from-twitter-api-for-external-login-authentication-asp-net-mvc?lq=1
-                o.RetrieveUserDetails = true;
-                o.SaveTokens = true;
-                o.ClaimActions.MapJsonKey("urn:twitter:profilepicture", "profile_image_url", ClaimTypes.Uri);
-                o.Events = new TwitterEvents()
-                {
-                    OnRemoteFailure = HandleOnRemoteFailure
-                };
-            })
-                /* Azure AD app model v2 has restrictions that prevent the use of plain HTTP for redirect URLs.
-                   Therefore, to authenticate through microsoft accounts, tryout the sample using the following URL:
-                   https://localhost:44318/
-                */
-                // You must first create an app with Microsoft Account and add its ID and Secret to your user-secrets.
-                // https://apps.dev.microsoft.com/
-                .AddOAuth("Microsoft-AccessToken", "Microsoft AccessToken only", o =>
-            {
-                o.ClientId = Configuration["microsoftaccount:clientid"];
-                o.ClientSecret = Configuration["microsoftaccount:clientsecret"];
-                o.CallbackPath = new PathString("/signin-microsoft-token");
-                o.AuthorizationEndpoint = MicrosoftAccountDefaults.AuthorizationEndpoint;
-                o.TokenEndpoint = MicrosoftAccountDefaults.TokenEndpoint;
-                o.Scope.Add("https://graph.microsoft.com/user.read");
-                o.SaveTokens = true;
-                o.Events = new OAuthEvents()
-                {
-                    OnRemoteFailure = HandleOnRemoteFailure
-                };
-            })
-                // You must first create an app with Microsoft Account and add its ID and Secret to your user-secrets.
-                // https://azure.microsoft.com/en-us/documentation/articles/active-directory-v2-app-registration/
-                .AddMicrosoftAccount(o =>
-            {
-                o.ClientId = Configuration["microsoftaccount:clientid"];
-                o.ClientSecret = Configuration["microsoftaccount:clientsecret"];
-                o.SaveTokens = true;
-                o.Scope.Add("offline_access");
-                o.Events = new OAuthEvents()
-                {
-                    OnRemoteFailure = HandleOnRemoteFailure
-                };
-            })
-                // You must first create an app with GitHub and add its ID and Secret to your user-secrets.
-                // https://github.com/settings/applications/
-                .AddOAuth("GitHub-AccessToken", "GitHub AccessToken only", o =>
-            {
-                o.ClientId = Configuration["github-token:clientid"];
-                o.ClientSecret = Configuration["github-token:clientsecret"];
-                o.CallbackPath = new PathString("/signin-github-token");
-                o.AuthorizationEndpoint = "https://github.com/login/oauth/authorize";
-                o.TokenEndpoint = "https://github.com/login/oauth/access_token";
-                o.SaveTokens = true;
-                o.Events = new OAuthEvents()
-                {
-                    OnRemoteFailure = HandleOnRemoteFailure
-                };
-            })
-                // You must first create an app with GitHub and add its ID and Secret to your user-secrets.
-                // https://github.com/settings/applications/
-                .AddOAuth("GitHub", "Github", o =>
-            {
-                o.ClientId = Configuration["github:clientid"];
-                o.ClientSecret = Configuration["github:clientsecret"];
-                o.CallbackPath = new PathString("/signin-github");
-                o.AuthorizationEndpoint = "https://github.com/login/oauth/authorize";
-                o.TokenEndpoint = "https://github.com/login/oauth/access_token";
-                o.UserInformationEndpoint = "https://api.github.com/user";
-                o.ClaimsIssuer = "OAuth2-Github";
-                o.SaveTokens = true;
-                // Retrieving user information is unique to each provider.
-                o.ClaimActions.MapJsonKey(ClaimTypes.NameIdentifier, "id");
-                o.ClaimActions.MapJsonKey(ClaimTypes.Name, "login");
-                o.ClaimActions.MapJsonKey("urn:github:name", "name");
-                o.ClaimActions.MapJsonKey(ClaimTypes.Email, "email", ClaimValueTypes.Email);
-                o.ClaimActions.MapJsonKey("urn:github:url", "url");
-                o.Events = new OAuthEvents
-                {
-                    OnRemoteFailure = HandleOnRemoteFailure,
-                    OnCreatingTicket = async context =>
-                    {
-                        // Get the GitHub user
-                        var request = new HttpRequestMessage(HttpMethod.Get, context.Options.UserInformationEndpoint);
-                        request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", context.AccessToken);
-                        request.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
-
-                        var response = await context.Backchannel.SendAsync(request, context.HttpContext.RequestAborted);
-                        response.EnsureSuccessStatusCode();
-
-                        var user = JObject.Parse(await response.Content.ReadAsStringAsync());
-
-                        context.RunClaimActions(user);
-                    }
-                };
-            });
-        }
-
-        private async Task HandleOnRemoteFailure(RemoteFailureContext context)
-        {
-            context.Response.StatusCode = 500;
-            context.Response.ContentType = "text/html";
-            await context.Response.WriteAsync("<html><body>");
-            await context.Response.WriteAsync("A remote failure has occurred: " + UrlEncoder.Default.Encode(context.Failure.Message) + "<br>");
-
-            if (context.Properties != null)
-            {
-                await context.Response.WriteAsync("Properties:<br>");
-                foreach (var pair in context.Properties.Items)
-                {
-                    await context.Response.WriteAsync($"-{ UrlEncoder.Default.Encode(pair.Key)}={ UrlEncoder.Default.Encode(pair.Value)}<br>");
-                }
-            }
-
-            await context.Response.WriteAsync("<a href=\"/\">Home</a>");
-            await context.Response.WriteAsync("</body></html>");
-
-            // context.Response.Redirect("/error?FailureMessage=" + UrlEncoder.Default.Encode(context.Failure.Message));
-
-            context.HandleResponse();
-        }
-
-        public void Configure(IApplicationBuilder app)
-        {
-            app.UseDeveloperExceptionPage();
-
-            app.UseAuthentication();
-
-            // Choose an authentication type
-            app.Map("/login", signinApp =>
-            {
-                signinApp.Run(async context =>
-                {
-                    var authType = context.Request.Query["authscheme"];
-                    if (!string.IsNullOrEmpty(authType))
-                    {
-                        // By default the client will be redirect back to the URL that issued the challenge (/login?authtype=foo),
-                        // send them to the home page instead (/).
-                        await context.ChallengeAsync(authType, new AuthenticationProperties() { RedirectUri = "/" });
-                        return;
-                    }
-
-                    var response = context.Response;
-                    response.ContentType = "text/html";
-                    await response.WriteAsync("<html><body>");
-                    await response.WriteAsync("Choose an authentication scheme: <br>");
-                    var schemeProvider = context.RequestServices.GetRequiredService<IAuthenticationSchemeProvider>();
-                    foreach (var provider in await schemeProvider.GetAllSchemesAsync())
-                    {
-                        await response.WriteAsync("<a href=\"?authscheme=" + provider.Name + "\">" + (provider.DisplayName ?? "(suppressed)") + "</a><br>");
-                    }
-                    await response.WriteAsync("</body></html>");
-                });
-            });
-
-            // Refresh the access token
-            app.Map("/refresh_token", signinApp =>
-            {
-                signinApp.Run(async context =>
-                {
-                    var response = context.Response;
-
-                    // Setting DefaultAuthenticateScheme causes User to be set
-                    // var user = context.User;
-
-                    // This is what [Authorize] calls
-                    var userResult = await context.AuthenticateAsync();
-                    var user = userResult.Principal;
-                    var authProperties = userResult.Properties;
-
-                    // This is what [Authorize(ActiveAuthenticationSchemes = MicrosoftAccountDefaults.AuthenticationScheme)] calls
-                    // var user = await context.AuthenticateAsync(MicrosoftAccountDefaults.AuthenticationScheme);
-
-                    // Deny anonymous request beyond this point.
-                    if (!userResult.Succeeded || user == null || !user.Identities.Any(identity => identity.IsAuthenticated))
-                    {
-                        // This is what [Authorize] calls
-                        // The cookie middleware will handle this and redirect to /login
-                        await context.ChallengeAsync();
-
-                        // This is what [Authorize(ActiveAuthenticationSchemes = MicrosoftAccountDefaults.AuthenticationScheme)] calls
-                        // await context.ChallengeAsync(MicrosoftAccountDefaults.AuthenticationScheme);
-
-                        return;
-                    }
-
-                    var currentAuthType = user.Identities.First().AuthenticationType;
-                    if (string.Equals(GoogleDefaults.AuthenticationScheme, currentAuthType)
-                        || string.Equals(MicrosoftAccountDefaults.AuthenticationScheme, currentAuthType))
-                    {
-                        var refreshToken = authProperties.GetTokenValue("refresh_token");
-
-                        if (string.IsNullOrEmpty(refreshToken))
-                        {
-                            response.ContentType = "text/html";
-                            await response.WriteAsync("<html><body>");
-                            await response.WriteAsync("No refresh_token is available.<br>");
-                            await response.WriteAsync("<a href=\"/\">Home</a>");
-                            await response.WriteAsync("</body></html>");
-                            return;
-                        }
-
-                        var options = await GetOAuthOptionsAsync(context, currentAuthType);
-
-                        var pairs = new Dictionary<string, string>()
-                        {
-                            { "client_id", options.ClientId },
-                            { "client_secret", options.ClientSecret },
-                            { "grant_type", "refresh_token" },
-                            { "refresh_token", refreshToken }
-                        };
-                        var content = new FormUrlEncodedContent(pairs);
-                        var refreshResponse = await options.Backchannel.PostAsync(options.TokenEndpoint, content, context.RequestAborted);
-                        refreshResponse.EnsureSuccessStatusCode();
-
-                        var payload = JObject.Parse(await refreshResponse.Content.ReadAsStringAsync());
-
-                        // Persist the new acess token
-                        authProperties.UpdateTokenValue("access_token", payload.Value<string>("access_token"));
-                        refreshToken = payload.Value<string>("refresh_token");
-                        if (!string.IsNullOrEmpty(refreshToken))
-                        {
-                            authProperties.UpdateTokenValue("refresh_token", refreshToken);
-                        }
-                        if (int.TryParse(payload.Value<string>("expires_in"), NumberStyles.Integer, CultureInfo.InvariantCulture, out var seconds))
-                        {
-                            var expiresAt = DateTimeOffset.UtcNow + TimeSpan.FromSeconds(seconds);
-                            authProperties.UpdateTokenValue("expires_at", expiresAt.ToString("o", CultureInfo.InvariantCulture));
-                        }
-                        await context.SignInAsync(user, authProperties);
-
-                        await PrintRefreshedTokensAsync(response, payload, authProperties);
-
-                        return;
-                    }
-                    // https://developers.facebook.com/docs/facebook-login/access-tokens/expiration-and-extension
-                    else if (string.Equals(FacebookDefaults.AuthenticationScheme, currentAuthType))
-                    {
-                        var options = await GetOAuthOptionsAsync(context, currentAuthType);
-
-                        var accessToken = authProperties.GetTokenValue("access_token");
-
-                        var query = new QueryBuilder()
-                        {
-                            { "grant_type", "fb_exchange_token" },
-                            { "client_id", options.ClientId },
-                            { "client_secret", options.ClientSecret },
-                            { "fb_exchange_token", accessToken },
-                        }.ToQueryString();
-
-                        var refreshResponse = await options.Backchannel.GetStringAsync(options.TokenEndpoint + query);
-                        var payload = JObject.Parse(refreshResponse);
-
-                        authProperties.UpdateTokenValue("access_token", payload.Value<string>("access_token"));
-                        if (int.TryParse(payload.Value<string>("expires_in"), NumberStyles.Integer, CultureInfo.InvariantCulture, out var seconds))
-                        {
-                            var expiresAt = DateTimeOffset.UtcNow + TimeSpan.FromSeconds(seconds);
-                            authProperties.UpdateTokenValue("expires_at", expiresAt.ToString("o", CultureInfo.InvariantCulture));
-                        }
-                        await context.SignInAsync(user, authProperties);
-
-                        await PrintRefreshedTokensAsync(response, payload, authProperties);
-
-                        return;
-                    }
-
-                    response.ContentType = "text/html";
-                    await response.WriteAsync("<html><body>");
-                    await response.WriteAsync("Refresh has not been implemented for this provider.<br>");
-                    await response.WriteAsync("<a href=\"/\">Home</a>");
-                    await response.WriteAsync("</body></html>");
-                });
-            });
-
-            // Sign-out to remove the user cookie.
-            app.Map("/logout", signoutApp =>
-            {
-                signoutApp.Run(async context =>
-                {
-                    var response = context.Response;
-                    response.ContentType = "text/html";
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await response.WriteAsync("<html><body>");
-                    await response.WriteAsync("You have been logged out. Goodbye " + context.User.Identity.Name + "<br>");
-                    await response.WriteAsync("<a href=\"/\">Home</a>");
-                    await response.WriteAsync("</body></html>");
-                });
-            });
-
-            // Display the remote error
-            app.Map("/error", errorApp =>
-            {
-                errorApp.Run(async context =>
-                {
-                    var response = context.Response;
-                    response.ContentType = "text/html";
-                    await response.WriteAsync("<html><body>");
-                    await response.WriteAsync("An remote failure has occurred: " + context.Request.Query["FailureMessage"] + "<br>");
-                    await response.WriteAsync("<a href=\"/\">Home</a>");
-                    await response.WriteAsync("</body></html>");
-                });
-            });
-
-
-            app.Run(async context =>
-            {
-                // Setting DefaultAuthenticateScheme causes User to be set
-                var user = context.User;
-
-                // This is what [Authorize] calls
-                // var user = await context.AuthenticateAsync();
-
-                // This is what [Authorize(ActiveAuthenticationSchemes = MicrosoftAccountDefaults.AuthenticationScheme)] calls
-                // var user = await context.AuthenticateAsync(MicrosoftAccountDefaults.AuthenticationScheme);
-
-                // Deny anonymous request beyond this point.
-                if (user == null || !user.Identities.Any(identity => identity.IsAuthenticated))
-                {
-                    // This is what [Authorize] calls
-                    // The cookie middleware will handle this and redirect to /login
-                    await context.ChallengeAsync();
-
-                    // This is what [Authorize(ActiveAuthenticationSchemes = MicrosoftAccountDefaults.AuthenticationScheme)] calls
-                    // await context.ChallengeAsync(MicrosoftAccountDefaults.AuthenticationScheme);
-
-                    return;
-                }
-
-                // Display user information
-                var response = context.Response;
-                response.ContentType = "text/html";
-                await response.WriteAsync("<html><body>");
-                await response.WriteAsync("Hello " + (context.User.Identity.Name ?? "anonymous") + "<br>");
-                foreach (var claim in context.User.Claims)
-                {
-                    await response.WriteAsync(claim.Type + ": " + claim.Value + "<br>");
-                }
-
-                await response.WriteAsync("Tokens:<br>");
-
-                await response.WriteAsync("Access Token: " + await context.GetTokenAsync("access_token") + "<br>");
-                await response.WriteAsync("Refresh Token: " + await context.GetTokenAsync("refresh_token") + "<br>");
-                await response.WriteAsync("Token Type: " + await context.GetTokenAsync("token_type") + "<br>");
-                await response.WriteAsync("expires_at: " + await context.GetTokenAsync("expires_at") + "<br>");
-                await response.WriteAsync("<a href=\"/logout\">Logout</a><br>");
-                await response.WriteAsync("<a href=\"/refresh_token\">Refresh Token</a><br>");
-                await response.WriteAsync("</body></html>");
-            });
-        }
-
-        private Task<OAuthOptions> GetOAuthOptionsAsync(HttpContext context, string currentAuthType)
-        {
-            if (string.Equals(GoogleDefaults.AuthenticationScheme, currentAuthType))
-            {
-                return Task.FromResult<OAuthOptions>(context.RequestServices.GetRequiredService<IOptionsMonitor<GoogleOptions>>().Get(currentAuthType));
-            }
-            else if (string.Equals(MicrosoftAccountDefaults.AuthenticationScheme, currentAuthType))
-            {
-                return Task.FromResult<OAuthOptions>(context.RequestServices.GetRequiredService<IOptionsMonitor<MicrosoftAccountOptions>>().Get(currentAuthType));
-            }
-            else if (string.Equals(FacebookDefaults.AuthenticationScheme, currentAuthType))
-            {
-                return Task.FromResult<OAuthOptions>(context.RequestServices.GetRequiredService<IOptionsMonitor<FacebookOptions>>().Get(currentAuthType));
-            }
-
-            throw new NotImplementedException(currentAuthType);
-        }
-
-        private async Task PrintRefreshedTokensAsync(HttpResponse response, JObject payload, AuthenticationProperties authProperties)
-        {
-            response.ContentType = "text/html";
-            await response.WriteAsync("<html><body>");
-            await response.WriteAsync("Refreshed.<br>");
-            await response.WriteAsync(HtmlEncoder.Default.Encode(payload.ToString()).Replace(",", ",<br>") + "<br>");
-
-            await response.WriteAsync("<br>Tokens:<br>");
-
-            await response.WriteAsync("Access Token: " + authProperties.GetTokenValue("access_token") + "<br>");
-            await response.WriteAsync("Refresh Token: " + authProperties.GetTokenValue("refresh_token") + "<br>");
-            await response.WriteAsync("Token Type: " + authProperties.GetTokenValue("token_type") + "<br>");
-            await response.WriteAsync("expires_at: " + authProperties.GetTokenValue("expires_at") + "<br>");
-
-            await response.WriteAsync("<a href=\"/\">Home</a><br>");
-            await response.WriteAsync("<a href=\"/refresh_token\">Refresh Token</a><br>");
-            await response.WriteAsync("</body></html>");
-        }
-    }
-}
-
diff --git a/samples/SocialSample/compiler/resources/cert.pfx b/samples/SocialSample/compiler/resources/cert.pfx
deleted file mode 100644
index 7118908c2..000000000
Binary files a/samples/SocialSample/compiler/resources/cert.pfx and /dev/null differ
diff --git a/samples/SocialSample/web.config b/samples/SocialSample/web.config
deleted file mode 100644
index f7ac67933..000000000
--- a/samples/SocialSample/web.config
+++ /dev/null
@@ -1,9 +0,0 @@
-<?xml version="1.0"?>
-<configuration>
-  <system.webServer>
-    <handlers>
-      <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModule" resourceType="Unspecified" />
-    </handlers>
-    <aspNetCore processPath="%LAUNCHER_PATH%" arguments="%LAUNCHER_ARGS%" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" forwardWindowsAuthToken="false" />
-  </system.webServer>
-</configuration>
\ No newline at end of file
diff --git a/samples/WsFedSample/Program.cs b/samples/WsFedSample/Program.cs
deleted file mode 100644
index 40e1945c6..000000000
--- a/samples/WsFedSample/Program.cs
+++ /dev/null
@@ -1,64 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.IO;
-using System.Linq;
-using System.Net;
-using System.Reflection;
-using System.Security.Cryptography.X509Certificates;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.Extensions.Configuration;
-using Microsoft.Extensions.FileProviders;
-using Microsoft.Extensions.Logging;
-
-namespace WsFedSample
-{
-    public class Program
-    {
-        public static void Main(string[] args)
-        {
-            var host = new WebHostBuilder()
-                .ConfigureLogging(factory =>
-                {
-                    factory.AddConsole();
-                    factory.AddDebug();
-                    factory.AddFilter("Console", level => level >= LogLevel.Information);
-                    factory.AddFilter("Debug", level => level >= LogLevel.Information);
-                })
-                .UseKestrel(options =>
-                {
-                    options.Listen(IPAddress.Loopback, 44307, listenOptions =>
-                    {
-                        // Configure SSL
-                        var serverCertificate = LoadCertificate();
-                        listenOptions.UseHttps(serverCertificate);
-                    });
-                })
-                .UseContentRoot(Directory.GetCurrentDirectory())
-                .UseIISIntegration()
-                .UseStartup<Startup>()
-                .Build();
-
-            host.Run();
-        }
-
-        private static X509Certificate2 LoadCertificate()
-        {
-            var assembly = typeof(Startup).GetTypeInfo().Assembly;
-            var embeddedFileProvider = new EmbeddedFileProvider(assembly, "WsFedSample");
-            var certificateFileInfo = embeddedFileProvider.GetFileInfo("compiler/resources/cert.pfx");
-            using (var certificateStream = certificateFileInfo.CreateReadStream())
-            {
-                byte[] certificatePayload;
-                using (var memoryStream = new MemoryStream())
-                {
-                    certificateStream.CopyTo(memoryStream);
-                    certificatePayload = memoryStream.ToArray();
-                }
-
-                return new X509Certificate2(certificatePayload, "testPassword");
-            }
-        }
-    }
-}
diff --git a/samples/WsFedSample/Properties/launchSettings.json b/samples/WsFedSample/Properties/launchSettings.json
deleted file mode 100644
index bdf80e248..000000000
--- a/samples/WsFedSample/Properties/launchSettings.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  "iisSettings": {
-    "windowsAuthentication": false,
-    "anonymousAuthentication": true,
-    "iisExpress": {
-      "applicationUrl": "https://localhost:44307/",
-      "sslPort": 44318
-    }
-  },
-  "profiles": {
-    "IIS Express": {
-      "commandName": "IISExpress",
-      "launchBrowser": true,
-      "launchUrl": "https://localhost:44307/",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    },
-    "WsFedSample": {
-      "commandName": "Project",
-      "launchBrowser": true,
-      "applicationUrl": "https://localhost:44307/",
-      "environmentVariables": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/samples/WsFedSample/Startup.cs b/samples/WsFedSample/Startup.cs
deleted file mode 100644
index 0fc32769e..000000000
--- a/samples/WsFedSample/Startup.cs
+++ /dev/null
@@ -1,168 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication.WsFederation;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Configuration;
-using Microsoft.Extensions.DependencyInjection;
-
-namespace WsFedSample
-{
-    public class Startup
-    {
-        public Startup(IConfiguration configuration)
-        {
-            Configuration = configuration;
-        }
-
-        public IConfiguration Configuration { get; }
-
-        // This method gets called by the runtime. Use this method to add services to the container.
-        public void ConfigureServices(IServiceCollection services)
-        {
-            services.AddAuthentication(sharedOptions =>
-            {
-                sharedOptions.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                sharedOptions.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                sharedOptions.DefaultChallengeScheme = WsFederationDefaults.AuthenticationScheme;
-            })
-            .AddWsFederation(options =>
-            {
-                options.Wtrealm = "https://Tratcheroutlook.onmicrosoft.com/WsFedSample";
-                options.MetadataAddress = "https://login.windows.net/cdc690f9-b6b8-4023-813a-bae7143d1f87/FederationMetadata/2007-06/FederationMetadata.xml";
-                // options.CallbackPath = "/";
-                // options.SkipUnrecognizedRequests = true;
-            })
-            .AddCookie();
-        }
-
-        public void Configure(IApplicationBuilder app)
-        {
-            app.UseDeveloperExceptionPage();
-            app.UseAuthentication();
-
-            app.Run(async context =>
-            {
-                if (context.Request.Path.Equals("/signedout"))
-                {
-                    await WriteHtmlAsync(context.Response, async res =>
-                    {
-                        await res.WriteAsync($"<h1>You have been signed out.</h1>");
-                        await res.WriteAsync("<a class=\"btn btn-link\" href=\"/\">Sign In</a>");
-                    });
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/signout"))
-                {
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await WriteHtmlAsync(context.Response, async res =>
-                    {
-                        await context.Response.WriteAsync($"<h1>Signed out {HtmlEncode(context.User.Identity.Name)}</h1>");
-                        await context.Response.WriteAsync("<a class=\"btn btn-link\" href=\"/\">Sign In</a>");
-                    });
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/signout-remote"))
-                {
-                    // Redirects
-                    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                    await context.SignOutAsync(WsFederationDefaults.AuthenticationScheme, new AuthenticationProperties()
-                    {
-                        RedirectUri = "/signedout"
-                    });
-                    return;
-                }
-
-                if (context.Request.Path.Equals("/Account/AccessDenied"))
-                {
-                    await WriteHtmlAsync(context.Response, async res =>
-                    {
-                        await context.Response.WriteAsync($"<h1>Access Denied for user {HtmlEncode(context.User.Identity.Name)} to resource '{HtmlEncode(context.Request.Query["ReturnUrl"])}'</h1>");
-                        await context.Response.WriteAsync("<a class=\"btn btn-link\" href=\"/signout\">Sign Out</a>");
-                    });
-                    return;
-                }
-
-                // DefaultAuthenticateScheme causes User to be set
-                var user = context.User;
-
-                // This is what [Authorize] calls
-                // var user = await context.AuthenticateAsync();
-
-                // This is what [Authorize(ActiveAuthenticationSchemes = WsFederationDefaults.AuthenticationScheme)] calls
-                // var user = await context.AuthenticateAsync(WsFederationDefaults.AuthenticationScheme);
-
-                // Not authenticated
-                if (user == null || !user.Identities.Any(identity => identity.IsAuthenticated))
-                {
-                    // This is what [Authorize] calls
-                    await context.ChallengeAsync();
-
-                    // This is what [Authorize(ActiveAuthenticationSchemes = WsFederationDefaults.AuthenticationScheme)] calls
-                    // await context.ChallengeAsync(WsFederationDefaults.AuthenticationScheme);
-
-                    return;
-                }
-
-                // Authenticated, but not authorized
-                if (context.Request.Path.Equals("/restricted") && !user.Identities.Any(identity => identity.HasClaim("special", "true")))
-                {
-                    await context.ForbidAsync();
-                    return;
-                }
-
-                await WriteHtmlAsync(context.Response, async response =>
-                {
-                    await response.WriteAsync($"<h1>Hello Authenticated User {HtmlEncode(user.Identity.Name)}</h1>");
-                    await response.WriteAsync("<a class=\"btn btn-default\" href=\"/restricted\">Restricted</a>");
-                    await response.WriteAsync("<a class=\"btn btn-default\" href=\"/signout\">Sign Out</a>");
-                    await response.WriteAsync("<a class=\"btn btn-default\" href=\"/signout-remote\">Sign Out Remote</a>");
-
-                    await response.WriteAsync("<h2>Claims:</h2>");
-                    await WriteTableHeader(response, new string[] { "Claim Type", "Value" }, context.User.Claims.Select(c => new string[] { c.Type, c.Value }));
-                });
-            });
-        }
-
-        private static async Task WriteHtmlAsync(HttpResponse response, Func<HttpResponse, Task> writeContent)
-        {
-            var bootstrap = "<link rel=\"stylesheet\" href=\"https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css\" integrity=\"sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u\" crossorigin=\"anonymous\">";
-
-            response.ContentType = "text/html";
-            await response.WriteAsync($"<html><head>{bootstrap}</head><body><div class=\"container\">");
-            await writeContent(response);
-            await response.WriteAsync("</div></body></html>");
-        }
-
-        private static async Task WriteTableHeader(HttpResponse response, IEnumerable<string> columns, IEnumerable<IEnumerable<string>> data)
-        {
-            await response.WriteAsync("<table class=\"table table-condensed\">");
-            await response.WriteAsync("<tr>");
-            foreach (var column in columns)
-            {
-                await response.WriteAsync($"<th>{HtmlEncode(column)}</th>");
-            }
-            await response.WriteAsync("</tr>");
-            foreach (var row in data)
-            {
-                await response.WriteAsync("<tr>");
-                foreach (var column in row)
-                {
-                    await response.WriteAsync($"<td>{HtmlEncode(column)}</td>");
-                }
-                await response.WriteAsync("</tr>");
-            }
-            await response.WriteAsync("</table>");
-        }
-
-        private static string HtmlEncode(string content) =>
-            string.IsNullOrEmpty(content) ? string.Empty : HtmlEncoder.Default.Encode(content);
-    }
-}
diff --git a/samples/WsFedSample/WsFedSample.csproj b/samples/WsFedSample/WsFedSample.csproj
deleted file mode 100644
index e1191ac81..000000000
--- a/samples/WsFedSample/WsFedSample.csproj
+++ /dev/null
@@ -1,27 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.WsFederation\Microsoft.AspNetCore.Authentication.WsFederation.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Server.IISIntegration" Version="$(MicrosoftAspNetCoreServerIISIntegrationPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel" Version="$(MicrosoftAspNetCoreServerKestrelPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel.Https" Version="$(MicrosoftAspNetCoreServerKestrelHttpsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="$(MicrosoftExtensionsConfigurationEnvironmentVariablesPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Diagnostics" Version="$(MicrosoftAspNetCoreDiagnosticsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.FileProviders.Embedded" Version="$(MicrosoftExtensionsFileProvidersEmbeddedPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="$(MicrosoftExtensionsLoggingConsolePackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Debug" Version="$(MicrosoftExtensionsLoggingDebugPackageVersion)" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <EmbeddedResource Include="compiler\resources\cert.pfx" />
-  </ItemGroup>
-
-</Project>
diff --git a/samples/WsFedSample/compiler/resources/cert.pfx b/samples/WsFedSample/compiler/resources/cert.pfx
deleted file mode 100644
index 7118908c2..000000000
Binary files a/samples/WsFedSample/compiler/resources/cert.pfx and /dev/null differ
diff --git a/shared/Microsoft.AspNetCore.ChunkingCookieManager.Sources/ChunkingCookieManager.cs b/shared/Microsoft.AspNetCore.ChunkingCookieManager.Sources/ChunkingCookieManager.cs
deleted file mode 100644
index 42cc4e2f0..000000000
--- a/shared/Microsoft.AspNetCore.ChunkingCookieManager.Sources/ChunkingCookieManager.cs
+++ /dev/null
@@ -1,309 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Globalization;
-using System.Linq;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Primitives;
-using Microsoft.Net.Http.Headers;
-
-// Keep the type public for Security repo as it would be a breaking change to change the accessor now.
-// Make this type internal for other repos as it could be used by multiple projects and having it public causes type conflicts.
-#if SECURITY
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// This handles cookies that are limited by per cookie length. It breaks down long cookies for responses, and reassembles them
-    /// from requests.
-    /// </summary>
-    public class ChunkingCookieManager : ICookieManager
-    {
-#else
-namespace Microsoft.AspNetCore.Internal
-{
-    /// <summary>
-    /// This handles cookies that are limited by per cookie length. It breaks down long cookies for responses, and reassembles them
-    /// from requests.
-    /// </summary>
-    internal class ChunkingCookieManager
-    {
-#endif
-        /// <summary>
-        /// The default maximum size of characters in a cookie to send back to the client.
-        /// </summary>
-        public const int DefaultChunkSize = 4050;
-
-        private const string ChunkKeySuffix = "C";
-        private const string ChunkCountPrefix = "chunks-";
-
-        public ChunkingCookieManager()
-        {
-            // Lowest common denominator. Safari has the lowest known limit (4093), and we leave little extra just in case.
-            // See http://browsercookielimits.x64.me/.
-            // Leave at least 40 in case CookiePolicy tries to add 'secure', 'samesite=strict' and/or 'httponly'.
-            ChunkSize = DefaultChunkSize;
-        }
-
-        /// <summary>
-        /// The maximum size of cookie to send back to the client. If a cookie exceeds this size it will be broken down into multiple
-        /// cookies. Set this value to null to disable this behavior. The default is 4090 characters, which is supported by all
-        /// common browsers.
-        ///
-        /// Note that browsers may also have limits on the total size of all cookies per domain, and on the number of cookies per domain.
-        /// </summary>
-        public int? ChunkSize { get; set; }
-
-        /// <summary>
-        /// Throw if not all chunks of a cookie are available on a request for re-assembly.
-        /// </summary>
-        public bool ThrowForPartialCookies { get; set; }
-
-        // Parse the "chunks-XX" to determine how many chunks there should be.
-        private static int ParseChunksCount(string value)
-        {
-            if (value != null && value.StartsWith(ChunkCountPrefix, StringComparison.Ordinal))
-            {
-                var chunksCountString = value.Substring(ChunkCountPrefix.Length);
-                int chunksCount;
-                if (int.TryParse(chunksCountString, NumberStyles.None, CultureInfo.InvariantCulture, out chunksCount))
-                {
-                    return chunksCount;
-                }
-            }
-            return 0;
-        }
-
-        /// <summary>
-        /// Get the reassembled cookie. Non chunked cookies are returned normally.
-        /// Cookies with missing chunks just have their "chunks-XX" header returned.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <returns>The reassembled cookie, if any, or null.</returns>
-        public string GetRequestCookie(HttpContext context, string key)
-        {
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-
-            if (key == null)
-            {
-                throw new ArgumentNullException(nameof(key));
-            }
-
-            var requestCookies = context.Request.Cookies;
-            var value = requestCookies[key];
-            var chunksCount = ParseChunksCount(value);
-            if (chunksCount > 0)
-            {
-                var chunks = new string[chunksCount];
-                for (var chunkId = 1; chunkId <= chunksCount; chunkId++)
-                {
-                    var chunk = requestCookies[key + ChunkKeySuffix + chunkId.ToString(CultureInfo.InvariantCulture)];
-                    if (string.IsNullOrEmpty(chunk))
-                    {
-                        if (ThrowForPartialCookies)
-                        {
-                            var totalSize = 0;
-                            for (int i = 0; i < chunkId - 1; i++)
-                            {
-                                totalSize += chunks[i].Length;
-                            }
-                            throw new FormatException(
-                                string.Format(
-                                    CultureInfo.CurrentCulture,
-                                    "The chunked cookie is incomplete. Only {0} of the expected {1} chunks were found, totaling {2} characters. A client size limit may have been exceeded.",
-                                    chunkId - 1,
-                                    chunksCount,
-                                    totalSize));
-                        }
-                        // Missing chunk, abort by returning the original cookie value. It may have been a false positive?
-                        return value;
-                    }
-
-                    chunks[chunkId - 1] = chunk;
-                }
-
-                return string.Join(string.Empty, chunks);
-            }
-            return value;
-        }
-
-        /// <summary>
-        /// Appends a new response cookie to the Set-Cookie header. If the cookie is larger than the given size limit
-        /// then it will be broken down into multiple cookies as follows:
-        /// Set-Cookie: CookieName=chunks-3; path=/
-        /// Set-Cookie: CookieNameC1=Segment1; path=/
-        /// Set-Cookie: CookieNameC2=Segment2; path=/
-        /// Set-Cookie: CookieNameC3=Segment3; path=/
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <param name="value"></param>
-        /// <param name="options"></param>
-        public void AppendResponseCookie(HttpContext context, string key, string value, CookieOptions options)
-        {
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-
-            if (key == null)
-            {
-                throw new ArgumentNullException(nameof(key));
-            }
-
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            var template = new SetCookieHeaderValue(key)
-            {
-                Domain = options.Domain,
-                Expires = options.Expires,
-                SameSite = (Net.Http.Headers.SameSiteMode)options.SameSite,
-                HttpOnly = options.HttpOnly,
-                Path = options.Path,
-                Secure = options.Secure,
-            };
-
-            var templateLength = template.ToString().Length;
-
-            value = value ?? string.Empty;
-
-            // Normal cookie
-            var responseCookies = context.Response.Cookies;
-            if (!ChunkSize.HasValue || ChunkSize.Value > templateLength + value.Length)
-            {
-                responseCookies.Append(key, value, options);
-            }
-            else if (ChunkSize.Value < templateLength + 10)
-            {
-                // 10 is the minimum data we want to put in an individual cookie, including the cookie chunk identifier "CXX".
-                // No room for data, we can't chunk the options and name
-                throw new InvalidOperationException("The cookie key and options are larger than ChunksSize, leaving no room for data.");
-            }
-            else
-            {
-                // Break the cookie down into multiple cookies.
-                // Key = CookieName, value = "Segment1Segment2Segment2"
-                // Set-Cookie: CookieName=chunks-3; path=/
-                // Set-Cookie: CookieNameC1="Segment1"; path=/
-                // Set-Cookie: CookieNameC2="Segment2"; path=/
-                // Set-Cookie: CookieNameC3="Segment3"; path=/
-                var dataSizePerCookie = ChunkSize.Value - templateLength - 3; // Budget 3 chars for the chunkid.
-                var cookieChunkCount = (int)Math.Ceiling(value.Length * 1.0 / dataSizePerCookie);
-
-                responseCookies.Append(key, ChunkCountPrefix + cookieChunkCount.ToString(CultureInfo.InvariantCulture), options);
-
-                var offset = 0;
-                for (var chunkId = 1; chunkId <= cookieChunkCount; chunkId++)
-                {
-                    var remainingLength = value.Length - offset;
-                    var length = Math.Min(dataSizePerCookie, remainingLength);
-                    var segment = value.Substring(offset, length);
-                    offset += length;
-
-                    responseCookies.Append(key + ChunkKeySuffix + chunkId.ToString(CultureInfo.InvariantCulture), segment, options);
-                }
-            }
-        }
-
-        /// <summary>
-        /// Deletes the cookie with the given key by setting an expired state. If a matching chunked cookie exists on
-        /// the request, delete each chunk.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <param name="options"></param>
-        public void DeleteCookie(HttpContext context, string key, CookieOptions options)
-        {
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-
-            if (key == null)
-            {
-                throw new ArgumentNullException(nameof(key));
-            }
-
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            var keys = new List<string>();
-            keys.Add(key + "=");
-
-            var requestCookie = context.Request.Cookies[key];
-            var chunks = ParseChunksCount(requestCookie);
-            if (chunks > 0)
-            {
-                for (int i = 1; i <= chunks + 1; i++)
-                {
-                    var subkey = key + ChunkKeySuffix + i.ToString(CultureInfo.InvariantCulture);
-                    keys.Add(subkey + "=");
-                }
-            }
-
-            var domainHasValue = !string.IsNullOrEmpty(options.Domain);
-            var pathHasValue = !string.IsNullOrEmpty(options.Path);
-
-            Func<string, bool> rejectPredicate;
-            Func<string, bool> predicate = value => keys.Any(k => value.StartsWith(k, StringComparison.OrdinalIgnoreCase));
-            if (domainHasValue)
-            {
-                rejectPredicate = value => predicate(value) && value.IndexOf("domain=" + options.Domain, StringComparison.OrdinalIgnoreCase) != -1;
-            }
-            else if (pathHasValue)
-            {
-                rejectPredicate = value => predicate(value) && value.IndexOf("path=" + options.Path, StringComparison.OrdinalIgnoreCase) != -1;
-            }
-            else
-            {
-                rejectPredicate = value => predicate(value);
-            }
-
-            var responseHeaders = context.Response.Headers;
-            var existingValues = responseHeaders[HeaderNames.SetCookie];
-            if (!StringValues.IsNullOrEmpty(existingValues))
-            {
-                responseHeaders[HeaderNames.SetCookie] = existingValues.Where(value => !rejectPredicate(value)).ToArray();
-            }
-
-            AppendResponseCookie(
-                context,
-                key,
-                string.Empty,
-                new CookieOptions()
-                {
-                    Path = options.Path,
-                    Domain = options.Domain,
-                    SameSite = options.SameSite,
-                    IsEssential = options.IsEssential,
-                    Expires = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc),
-                });
-
-            for (int i = 1; i <= chunks; i++)
-            {
-                AppendResponseCookie(
-                    context,
-                    key + "C" + i.ToString(CultureInfo.InvariantCulture),
-                    string.Empty,
-                    new CookieOptions()
-                    {
-                        Path = options.Path,
-                        Domain = options.Domain,
-                        SameSite = options.SameSite,
-                        IsEssential = options.IsEssential,
-                        Expires = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc),
-                    });
-            }
-        }
-    }
-}
diff --git a/src/Directory.Build.props b/src/Directory.Build.props
deleted file mode 100644
index 1e0980f66..000000000
--- a/src/Directory.Build.props
+++ /dev/null
@@ -1,7 +0,0 @@
-<Project>
-  <Import Project="..\Directory.Build.props" />
-
-  <ItemGroup>
-    <PackageReference Include="Internal.AspNetCore.Sdk" PrivateAssets="All" Version="$(InternalAspNetCoreSdkPackageVersion)" />
-  </ItemGroup>
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/Constants.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/Constants.cs
deleted file mode 100644
index 3aabf94c1..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/Constants.cs
+++ /dev/null
@@ -1,13 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    internal static class Constants
-    {
-        internal static class Headers
-        {
-            internal const string SetCookie = "Set-Cookie";
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAppBuilderExtensions.cs
deleted file mode 100644
index bdfd43c79..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAppBuilderExtensions.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.Cookies;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add cookie authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class CookieAppBuilderExtensions
-    {
-        /// <summary>
-        /// UseCookieAuthentication is obsolete. Configure Cookie authentication with AddAuthentication().AddCookie in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseCookieAuthentication is obsolete. Configure Cookie authentication with AddAuthentication().AddCookie in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseCookieAuthentication(this IApplicationBuilder app)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-
-        /// <summary>
-        /// UseCookieAuthentication is obsolete. Configure Cookie authentication with AddAuthentication().AddCookie in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">A <see cref="CookieAuthenticationOptions"/> that specifies options for the handler.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseCookieAuthentication is obsolete. Configure Cookie authentication with AddAuthentication().AddCookie in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseCookieAuthentication(this IApplicationBuilder app, CookieAuthenticationOptions options)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationDefaults.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationDefaults.cs
deleted file mode 100644
index 700b60797..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationDefaults.cs
+++ /dev/null
@@ -1,46 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// Default values related to cookie-based authentication handler
-    /// </summary>
-    public static class CookieAuthenticationDefaults
-    {
-        /// <summary>
-        /// The default value used for CookieAuthenticationOptions.AuthenticationScheme
-        /// </summary>
-        public const string AuthenticationScheme = "Cookies";
-
-        /// <summary>
-        /// The prefix used to provide a default CookieAuthenticationOptions.CookieName
-        /// </summary>
-        public static readonly string CookiePrefix = ".AspNetCore.";
-
-        /// <summary>
-        /// The default value used by CookieAuthenticationMiddleware for the
-        /// CookieAuthenticationOptions.LoginPath
-        /// </summary>
-        public static readonly PathString LoginPath = new PathString("/Account/Login");
-
-        /// <summary>
-        /// The default value used by CookieAuthenticationMiddleware for the
-        /// CookieAuthenticationOptions.LogoutPath
-        /// </summary>
-        public static readonly PathString LogoutPath = new PathString("/Account/Logout");
-
-        /// <summary>
-        /// The default value used by CookieAuthenticationMiddleware for the
-        /// CookieAuthenticationOptions.AccessDeniedPath
-        /// </summary>
-        public static readonly PathString AccessDeniedPath = new PathString("/Account/AccessDenied");
-
-        /// <summary>
-        /// The default value of the CookieAuthenticationOptions.ReturnUrlParameter
-        /// </summary>
-        public static readonly string ReturnUrlParameter = "ReturnUrl";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationHandler.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationHandler.cs
deleted file mode 100644
index ff6bb3cbc..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationHandler.cs
+++ /dev/null
@@ -1,451 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Microsoft.Net.Http.Headers;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    public class CookieAuthenticationHandler : SignInAuthenticationHandler<CookieAuthenticationOptions>
-    {
-        private const string HeaderValueNoCache = "no-cache";
-        private const string HeaderValueEpocDate = "Thu, 01 Jan 1970 00:00:00 GMT";
-        private const string SessionIdClaim = "Microsoft.AspNetCore.Authentication.Cookies-SessionId";
-
-        private bool _shouldRefresh;
-        private bool _signInCalled;
-        private bool _signOutCalled;
-
-        private DateTimeOffset? _refreshIssuedUtc;
-        private DateTimeOffset? _refreshExpiresUtc;
-        private string _sessionKey;
-        private Task<AuthenticateResult> _readCookieTask;
-        private AuthenticationTicket _refreshTicket;
-
-        public CookieAuthenticationHandler(IOptionsMonitor<CookieAuthenticationOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        { }
-
-        /// <summary>
-        /// The handler calls methods on the events which give the application control at certain points where processing is occurring.
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        protected new CookieAuthenticationEvents Events
-        {
-            get { return (CookieAuthenticationEvents)base.Events; }
-            set { base.Events = value; }
-        }
-
-        protected override Task InitializeHandlerAsync()
-        {
-            // Cookies needs to finish the response
-            Context.Response.OnStarting(FinishResponseAsync);
-            return Task.CompletedTask;
-        }
-
-        /// <summary>
-        /// Creates a new instance of the events instance.
-        /// </summary>
-        /// <returns>A new instance of the events instance.</returns>
-        protected override Task<object> CreateEventsAsync() => Task.FromResult<object>(new CookieAuthenticationEvents());
-
-        private Task<AuthenticateResult> EnsureCookieTicket()
-        {
-            // We only need to read the ticket once
-            if (_readCookieTask == null)
-            {
-                _readCookieTask = ReadCookieTicket();
-            }
-            return _readCookieTask;
-        }
-
-        private void CheckForRefresh(AuthenticationTicket ticket)
-        {
-            var currentUtc = Clock.UtcNow;
-            var issuedUtc = ticket.Properties.IssuedUtc;
-            var expiresUtc = ticket.Properties.ExpiresUtc;
-            var allowRefresh = ticket.Properties.AllowRefresh ?? true;
-            if (issuedUtc != null && expiresUtc != null && Options.SlidingExpiration && allowRefresh)
-            {
-                var timeElapsed = currentUtc.Subtract(issuedUtc.Value);
-                var timeRemaining = expiresUtc.Value.Subtract(currentUtc);
-
-                if (timeRemaining < timeElapsed)
-                {
-                    RequestRefresh(ticket);
-                }
-            }
-        }
-
-        private void RequestRefresh(AuthenticationTicket ticket, ClaimsPrincipal replacedPrincipal = null)
-        {
-            var issuedUtc = ticket.Properties.IssuedUtc;
-            var expiresUtc = ticket.Properties.ExpiresUtc;
-
-            if (issuedUtc != null && expiresUtc != null)
-            {
-                _shouldRefresh = true;
-                var currentUtc = Clock.UtcNow;
-                _refreshIssuedUtc = currentUtc;
-                var timeSpan = expiresUtc.Value.Subtract(issuedUtc.Value);
-                _refreshExpiresUtc = currentUtc.Add(timeSpan);
-                _refreshTicket = CloneTicket(ticket, replacedPrincipal);
-            }
-        }
-
-        private AuthenticationTicket CloneTicket(AuthenticationTicket ticket, ClaimsPrincipal replacedPrincipal)
-        {
-            var principal = replacedPrincipal ?? ticket.Principal;
-            var newPrincipal = new ClaimsPrincipal();
-            foreach (var identity in principal.Identities)
-            {
-                newPrincipal.AddIdentity(identity.Clone());
-            }
-
-            var newProperties = new AuthenticationProperties();
-            foreach (var item in ticket.Properties.Items)
-            {
-                newProperties.Items[item.Key] = item.Value;
-            }
-
-            return new AuthenticationTicket(newPrincipal, newProperties, ticket.AuthenticationScheme);
-        }
-
-        private async Task<AuthenticateResult> ReadCookieTicket()
-        {
-            var cookie = Options.CookieManager.GetRequestCookie(Context, Options.Cookie.Name);
-            if (string.IsNullOrEmpty(cookie))
-            {
-                return AuthenticateResult.NoResult();
-            }
-
-            var ticket = Options.TicketDataFormat.Unprotect(cookie, GetTlsTokenBinding());
-            if (ticket == null)
-            {
-                return AuthenticateResult.Fail("Unprotect ticket failed");
-            }
-
-            if (Options.SessionStore != null)
-            {
-                var claim = ticket.Principal.Claims.FirstOrDefault(c => c.Type.Equals(SessionIdClaim));
-                if (claim == null)
-                {
-                    return AuthenticateResult.Fail("SessionId missing");
-                }
-                _sessionKey = claim.Value;
-                ticket = await Options.SessionStore.RetrieveAsync(_sessionKey);
-                if (ticket == null)
-                {
-                    return AuthenticateResult.Fail("Identity missing in session store");
-                }
-            }
-
-            var currentUtc = Clock.UtcNow;
-            var expiresUtc = ticket.Properties.ExpiresUtc;
-
-            if (expiresUtc != null && expiresUtc.Value < currentUtc)
-            {
-                if (Options.SessionStore != null)
-                {
-                    await Options.SessionStore.RemoveAsync(_sessionKey);
-                }
-                return AuthenticateResult.Fail("Ticket expired");
-            }
-
-            CheckForRefresh(ticket);
-
-            // Finally we have a valid ticket
-            return AuthenticateResult.Success(ticket);
-        }
-
-        protected override async Task<AuthenticateResult> HandleAuthenticateAsync()
-        {
-            var result = await EnsureCookieTicket();
-            if (!result.Succeeded)
-            {
-                return result;
-            }
-
-            var context = new CookieValidatePrincipalContext(Context, Scheme, Options, result.Ticket);
-            await Events.ValidatePrincipal(context);
-
-            if (context.Principal == null)
-            {
-                return AuthenticateResult.Fail("No principal.");
-            }
-
-            if (context.ShouldRenew)
-            {
-                RequestRefresh(result.Ticket, context.Principal);
-            }
-
-            return AuthenticateResult.Success(new AuthenticationTicket(context.Principal, context.Properties, Scheme.Name));
-        }
-
-        private CookieOptions BuildCookieOptions()
-        {
-            var cookieOptions = Options.Cookie.Build(Context);
-            // ignore the 'Expires' value as this will be computed elsewhere
-            cookieOptions.Expires = null;
-
-            return cookieOptions;
-        }
-
-        protected virtual async Task FinishResponseAsync()
-        {
-            // Only renew if requested, and neither sign in or sign out was called
-            if (!_shouldRefresh || _signInCalled || _signOutCalled)
-            {
-                return;
-            }
-
-            var ticket = _refreshTicket;
-            if (ticket != null)
-            {
-                var properties = ticket.Properties;
-
-                if (_refreshIssuedUtc.HasValue)
-                {
-                    properties.IssuedUtc = _refreshIssuedUtc;
-                }
-
-                if (_refreshExpiresUtc.HasValue)
-                {
-                    properties.ExpiresUtc = _refreshExpiresUtc;
-                }
-
-                if (Options.SessionStore != null && _sessionKey != null)
-                {
-                    await Options.SessionStore.RenewAsync(_sessionKey, ticket);
-                    var principal = new ClaimsPrincipal(
-                        new ClaimsIdentity(
-                            new[] { new Claim(SessionIdClaim, _sessionKey, ClaimValueTypes.String, Options.ClaimsIssuer) },
-                            Scheme.Name));
-                    ticket = new AuthenticationTicket(principal, null, Scheme.Name);
-                }
-
-                var cookieValue = Options.TicketDataFormat.Protect(ticket, GetTlsTokenBinding());
-
-                var cookieOptions = BuildCookieOptions();
-                if (properties.IsPersistent && _refreshExpiresUtc.HasValue)
-                {
-                    cookieOptions.Expires = _refreshExpiresUtc.Value.ToUniversalTime();
-                }
-
-                Options.CookieManager.AppendResponseCookie(
-                    Context,
-                    Options.Cookie.Name,
-                    cookieValue,
-                    cookieOptions);
-
-                await ApplyHeaders(shouldRedirectToReturnUrl: false, properties: properties);
-            }
-        }
-
-        protected async override Task HandleSignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-        {
-            if (user == null)
-            {
-                throw new ArgumentNullException(nameof(user));
-            }
-
-            properties = properties ?? new AuthenticationProperties();
-
-            _signInCalled = true;
-
-            // Process the request cookie to initialize members like _sessionKey.
-            await EnsureCookieTicket();
-            var cookieOptions = BuildCookieOptions();
-
-            var signInContext = new CookieSigningInContext(
-                Context,
-                Scheme,
-                Options,
-                user,
-                properties,
-                cookieOptions);
-
-            DateTimeOffset issuedUtc;
-            if (signInContext.Properties.IssuedUtc.HasValue)
-            {
-                issuedUtc = signInContext.Properties.IssuedUtc.Value;
-            }
-            else
-            {
-                issuedUtc = Clock.UtcNow;
-                signInContext.Properties.IssuedUtc = issuedUtc;
-            }
-
-            if (!signInContext.Properties.ExpiresUtc.HasValue)
-            {
-                signInContext.Properties.ExpiresUtc = issuedUtc.Add(Options.ExpireTimeSpan);
-            }
-
-            await Events.SigningIn(signInContext);
-
-            if (signInContext.Properties.IsPersistent)
-            {
-                var expiresUtc = signInContext.Properties.ExpiresUtc ?? issuedUtc.Add(Options.ExpireTimeSpan);
-                signInContext.CookieOptions.Expires = expiresUtc.ToUniversalTime();
-            }
-
-            var ticket = new AuthenticationTicket(signInContext.Principal, signInContext.Properties, signInContext.Scheme.Name);
-
-            if (Options.SessionStore != null)
-            {
-                if (_sessionKey != null)
-                {
-                    await Options.SessionStore.RemoveAsync(_sessionKey);
-                }
-                _sessionKey = await Options.SessionStore.StoreAsync(ticket);
-                var principal = new ClaimsPrincipal(
-                    new ClaimsIdentity(
-                        new[] { new Claim(SessionIdClaim, _sessionKey, ClaimValueTypes.String, Options.ClaimsIssuer) },
-                        Options.ClaimsIssuer));
-                ticket = new AuthenticationTicket(principal, null, Scheme.Name);
-            }
-
-            var cookieValue = Options.TicketDataFormat.Protect(ticket, GetTlsTokenBinding());
-
-            Options.CookieManager.AppendResponseCookie(
-                Context,
-                Options.Cookie.Name,
-                cookieValue,
-                signInContext.CookieOptions);
-
-            var signedInContext = new CookieSignedInContext(
-                Context,
-                Scheme,
-                signInContext.Principal,
-                signInContext.Properties,
-                Options);
-
-            await Events.SignedIn(signedInContext);
-
-            // Only redirect on the login path
-            var shouldRedirect = Options.LoginPath.HasValue && OriginalPath == Options.LoginPath;
-            await ApplyHeaders(shouldRedirect, signedInContext.Properties);
-
-            Logger.SignedIn(Scheme.Name);
-        }
-
-        protected async override Task HandleSignOutAsync(AuthenticationProperties properties)
-        {
-            properties = properties ?? new AuthenticationProperties();
-
-            _signOutCalled = true;
-
-            // Process the request cookie to initialize members like _sessionKey.
-            await EnsureCookieTicket();
-            var cookieOptions = BuildCookieOptions();
-            if (Options.SessionStore != null && _sessionKey != null)
-            {
-                await Options.SessionStore.RemoveAsync(_sessionKey);
-            }
-
-            var context = new CookieSigningOutContext(
-                Context,
-                Scheme,
-                Options,
-                properties,
-                cookieOptions);
-
-            await Events.SigningOut(context);
-
-            Options.CookieManager.DeleteCookie(
-                Context,
-                Options.Cookie.Name,
-                context.CookieOptions);
-
-            // Only redirect on the logout path
-            var shouldRedirect = Options.LogoutPath.HasValue && OriginalPath == Options.LogoutPath;
-            await ApplyHeaders(shouldRedirect, context.Properties);
-
-            Logger.SignedOut(Scheme.Name);
-        }
-
-        private async Task ApplyHeaders(bool shouldRedirectToReturnUrl, AuthenticationProperties properties)
-        {
-            Response.Headers[HeaderNames.CacheControl] = HeaderValueNoCache;
-            Response.Headers[HeaderNames.Pragma] = HeaderValueNoCache;
-            Response.Headers[HeaderNames.Expires] = HeaderValueEpocDate;
-
-            if (shouldRedirectToReturnUrl && Response.StatusCode == 200)
-            {
-                // set redirect uri in order:
-                // 1. properties.RedirectUri
-                // 2. query parameter ReturnUrlParameter
-                //
-                // Absolute uri is not allowed if it is from query string as query string is not
-                // a trusted source.
-                var redirectUri = properties.RedirectUri;
-                if (string.IsNullOrEmpty(redirectUri))
-                {
-                    redirectUri = Request.Query[Options.ReturnUrlParameter];
-                    if (string.IsNullOrEmpty(redirectUri) || !IsHostRelative(redirectUri))
-                    {
-                        redirectUri = null;
-                    }
-                }
-
-                if (redirectUri != null)
-                {
-                    await Events.RedirectToReturnUrl(
-                        new RedirectContext<CookieAuthenticationOptions>(Context, Scheme, Options, properties, redirectUri));
-                }
-            }
-        }
-
-        private static bool IsHostRelative(string path)
-        {
-            if (string.IsNullOrEmpty(path))
-            {
-                return false;
-            }
-            if (path.Length == 1)
-            {
-                return path[0] == '/';
-            }
-            return path[0] == '/' && path[1] != '/' && path[1] != '\\';
-        }
-
-        protected override async Task HandleForbiddenAsync(AuthenticationProperties properties)
-        {
-            var returnUrl = properties.RedirectUri;
-            if (string.IsNullOrEmpty(returnUrl))
-            {
-                returnUrl = OriginalPathBase + OriginalPath + Request.QueryString;
-            }
-            var accessDeniedUri = Options.AccessDeniedPath + QueryString.Create(Options.ReturnUrlParameter, returnUrl);
-            var redirectContext = new RedirectContext<CookieAuthenticationOptions>(Context, Scheme, Options, properties, BuildRedirectUri(accessDeniedUri));
-            await Events.RedirectToAccessDenied(redirectContext);
-        }
-
-        protected override async Task HandleChallengeAsync(AuthenticationProperties properties)
-        {
-            var redirectUri = properties.RedirectUri;
-            if (string.IsNullOrEmpty(redirectUri))
-            {
-                redirectUri = OriginalPathBase + OriginalPath + Request.QueryString;
-            }
-
-            var loginUri = Options.LoginPath + QueryString.Create(Options.ReturnUrlParameter, redirectUri);
-            var redirectContext = new RedirectContext<CookieAuthenticationOptions>(Context, Scheme, Options, properties, BuildRedirectUri(loginUri));
-            await Events.RedirectToLogin(redirectContext);
-        }
-
-        private string GetTlsTokenBinding()
-        {
-            var binding = Context.Features.Get<ITlsTokenBindingFeature>()?.GetProvidedTokenBindingId();
-            return binding == null ? null : Convert.ToBase64String(binding);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationOptions.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationOptions.cs
deleted file mode 100644
index 78156caec..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationOptions.cs
+++ /dev/null
@@ -1,151 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.Internal;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// Configuration options for <see cref="CookieAuthenticationOptions"/>.
-    /// </summary>
-    public class CookieAuthenticationOptions : AuthenticationSchemeOptions
-    {
-        private CookieBuilder _cookieBuilder = new RequestPathBaseCookieBuilder
-        {
-            // the default name is configured in PostConfigureCookieAuthenticationOptions
-
-            // To support OAuth authentication, a lax mode is required, see https://github.com/aspnet/Security/issues/1231.
-            SameSite = SameSiteMode.Lax,
-            HttpOnly = true,
-            SecurePolicy = CookieSecurePolicy.SameAsRequest,
-            IsEssential = true,
-        };
-
-        /// <summary>
-        /// Create an instance of the options initialized with the default values
-        /// </summary>
-        public CookieAuthenticationOptions()
-        {
-            ExpireTimeSpan = TimeSpan.FromDays(14);
-            ReturnUrlParameter = CookieAuthenticationDefaults.ReturnUrlParameter;
-            SlidingExpiration = true;
-            Events = new CookieAuthenticationEvents();
-        }
-
-        /// <summary>
-        /// <para>
-        /// Determines the settings used to create the cookie.
-        /// </para>
-        /// <para>
-        /// <seealso cref="CookieBuilder.SameSite"/> defaults to <see cref="SameSiteMode.Lax"/>.
-        /// <seealso cref="CookieBuilder.HttpOnly"/> defaults to <c>true</c>.
-        /// <seealso cref="CookieBuilder.SecurePolicy"/> defaults to <see cref="CookieSecurePolicy.SameAsRequest"/>.
-        /// </para>
-        /// </summary>
-        /// <remarks>
-        /// <para>
-        /// The default value for cookie name is ".AspNetCore.Cookies".
-        /// This value should be changed if you change the name of the AuthenticationScheme, especially if your
-        /// system uses the cookie authentication handler multiple times.
-        /// </para>
-        /// <para>
-        /// <seealso cref="CookieBuilder.SameSite"/> determines if the browser should allow the cookie to be attached to same-site or cross-site requests.
-        /// The default is Lax, which means the cookie is only allowed to be attached to cross-site requests using safe HTTP methods and same-site requests.
-        /// </para>
-        /// <para>
-        /// <seealso cref="CookieBuilder.HttpOnly"/> determines if the browser should allow the cookie to be accessed by client-side javascript.
-        /// The default is true, which means the cookie will only be passed to http requests and is not made available to script on the page.
-        /// </para>
-        /// <para>
-        /// <seealso cref="CookieBuilder.Expiration"/> is currently ignored. Use <see cref="ExpireTimeSpan"/> to control lifetime of cookie authentication.
-        /// </para>
-        /// </remarks>
-        public CookieBuilder Cookie
-        {
-            get => _cookieBuilder;
-            set => _cookieBuilder = value ?? throw new ArgumentNullException(nameof(value));
-        }
-
-        /// <summary>
-        /// If set this will be used by the CookieAuthenticationHandler for data protection.
-        /// </summary>
-        public IDataProtectionProvider DataProtectionProvider { get; set; }
-
-        /// <summary>
-        /// The SlidingExpiration is set to true to instruct the handler to re-issue a new cookie with a new
-        /// expiration time any time it processes a request which is more than halfway through the expiration window.
-        /// </summary>
-        public bool SlidingExpiration { get; set; }
-
-        /// <summary>
-        /// The LoginPath property is used by the handler for the redirection target when handling ChallengeAsync.
-        /// The current url which is added to the LoginPath as a query string parameter named by the ReturnUrlParameter. 
-        /// Once a request to the LoginPath grants a new SignIn identity, the ReturnUrlParameter value is used to redirect 
-        /// the browser back to the original url.
-        /// </summary>
-        public PathString LoginPath { get; set; }
-
-        /// <summary>
-        /// If the LogoutPath is provided the handler then a request to that path will redirect based on the ReturnUrlParameter.
-        /// </summary>
-        public PathString LogoutPath { get; set; }
-
-        /// <summary>
-        /// The AccessDeniedPath property is used by the handler for the redirection target when handling ForbidAsync.
-        /// </summary>
-        public PathString AccessDeniedPath { get; set; }
-
-        /// <summary>
-        /// The ReturnUrlParameter determines the name of the query string parameter which is appended by the handler
-        /// when during a Challenge. This is also the query string parameter looked for when a request arrives on the 
-        /// login path or logout path, in order to return to the original url after the action is performed.
-        /// </summary>
-        public string ReturnUrlParameter { get; set; }
-
-        /// <summary>
-        /// The Provider may be assigned to an instance of an object created by the application at startup time. The handler
-        /// calls methods on the provider which give the application control at certain points where processing is occurring.
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        public new CookieAuthenticationEvents Events
-        {
-            get => (CookieAuthenticationEvents)base.Events;
-            set => base.Events = value;
-        }
-
-        /// <summary>
-        /// The TicketDataFormat is used to protect and unprotect the identity and other properties which are stored in the
-        /// cookie value. If not provided one will be created using <see cref="DataProtectionProvider"/>.
-        /// </summary>
-        public ISecureDataFormat<AuthenticationTicket> TicketDataFormat { get; set; }
-
-        /// <summary>
-        /// The component used to get cookies from the request or set them on the response.
-        ///
-        /// ChunkingCookieManager will be used by default.
-        /// </summary>
-        public ICookieManager CookieManager { get; set; }
-
-        /// <summary>
-        /// An optional container in which to store the identity across requests. When used, only a session identifier is sent
-        /// to the client. This can be used to mitigate potential problems with very large identities.
-        /// </summary>
-        public ITicketStore SessionStore { get; set; }
-
-        /// <summary>
-        /// <para>
-        /// Controls how much time the authentication ticket stored in the cookie will remain valid from the point it is created
-        /// The expiration information is stored in the protected cookie ticket. Because of that an expired cookie will be ignored
-        /// even if it is passed to the server after the browser should have purged it.
-        /// </para>
-        /// <para>
-        /// This is separate from the value of <seealso cref="CookieOptions.Expires"/>, which specifies
-        /// how long the browser will keep the cookie.
-        /// </para>
-        /// </summary>
-        public TimeSpan ExpireTimeSpan { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/CookieExtensions.cs
deleted file mode 100644
index 4c41f54a9..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/CookieExtensions.cs
+++ /dev/null
@@ -1,32 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    public static class CookieExtensions
-    {
-        public static AuthenticationBuilder AddCookie(this AuthenticationBuilder builder)
-            => builder.AddCookie(CookieAuthenticationDefaults.AuthenticationScheme);
-
-        public static AuthenticationBuilder AddCookie(this AuthenticationBuilder builder, string authenticationScheme)
-            => builder.AddCookie(authenticationScheme, configureOptions: null);
-
-        public static AuthenticationBuilder AddCookie(this AuthenticationBuilder builder, Action<CookieAuthenticationOptions> configureOptions) 
-            => builder.AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, configureOptions);
-
-        public static AuthenticationBuilder AddCookie(this AuthenticationBuilder builder, string authenticationScheme, Action<CookieAuthenticationOptions> configureOptions)
-            => builder.AddCookie(authenticationScheme, displayName: null, configureOptions: configureOptions);
-
-        public static AuthenticationBuilder AddCookie(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<CookieAuthenticationOptions> configureOptions)
-        {
-            builder.Services.TryAddEnumerable(ServiceDescriptor.Singleton<IPostConfigureOptions<CookieAuthenticationOptions>, PostConfigureCookieAuthenticationOptions>());
-            return builder.AddScheme<CookieAuthenticationOptions, CookieAuthenticationHandler>(authenticationScheme, displayName, configureOptions);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieAuthenticationEvents.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieAuthenticationEvents.cs
deleted file mode 100644
index 2b8b0416b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieAuthenticationEvents.cs
+++ /dev/null
@@ -1,158 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// This default implementation of the ICookieAuthenticationEvents may be used if the 
-    /// application only needs to override a few of the interface methods. This may be used as a base class
-    /// or may be instantiated directly.
-    /// </summary>
-    public class CookieAuthenticationEvents
-    {
-        /// <summary>
-        /// A delegate assigned to this property will be invoked when the related method is called.
-        /// </summary>
-        public Func<CookieValidatePrincipalContext, Task> OnValidatePrincipal { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// A delegate assigned to this property will be invoked when the related method is called.
-        /// </summary>
-        public Func<CookieSigningInContext, Task> OnSigningIn { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// A delegate assigned to this property will be invoked when the related method is called.
-        /// </summary>
-        public Func<CookieSignedInContext, Task> OnSignedIn { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// A delegate assigned to this property will be invoked when the related method is called.
-        /// </summary>
-        public Func<CookieSigningOutContext, Task> OnSigningOut { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// A delegate assigned to this property will be invoked when the related method is called.
-        /// </summary>
-        public Func<RedirectContext<CookieAuthenticationOptions>, Task> OnRedirectToLogin { get; set; } = context =>
-        {
-            if (IsAjaxRequest(context.Request))
-            {
-                context.Response.Headers["Location"] = context.RedirectUri;
-                context.Response.StatusCode = 401;
-            }
-            else
-            {
-                context.Response.Redirect(context.RedirectUri);
-            }
-            return Task.CompletedTask;
-        };
-
-        /// <summary>
-        /// A delegate assigned to this property will be invoked when the related method is called.
-        /// </summary>
-        public Func<RedirectContext<CookieAuthenticationOptions>, Task> OnRedirectToAccessDenied { get; set; } = context =>
-        {
-            if (IsAjaxRequest(context.Request))
-            {
-                context.Response.Headers["Location"] = context.RedirectUri;
-                context.Response.StatusCode = 403;
-            }
-            else
-            {
-                context.Response.Redirect(context.RedirectUri);
-            }
-            return Task.CompletedTask;
-        };
-
-        /// <summary>
-        /// A delegate assigned to this property will be invoked when the related method is called.
-        /// </summary>
-        public Func<RedirectContext<CookieAuthenticationOptions>, Task> OnRedirectToLogout { get; set; } = context =>
-        {
-            if (IsAjaxRequest(context.Request))
-            {
-                context.Response.Headers["Location"] = context.RedirectUri;
-            }
-            else
-            {
-                context.Response.Redirect(context.RedirectUri);
-            }
-            return Task.CompletedTask;
-        };
-
-        /// <summary>
-        /// A delegate assigned to this property will be invoked when the related method is called.
-        /// </summary>
-        public Func<RedirectContext<CookieAuthenticationOptions>, Task> OnRedirectToReturnUrl { get; set; } = context =>
-        {
-            if (IsAjaxRequest(context.Request))
-            {
-                context.Response.Headers["Location"] = context.RedirectUri;
-            }
-            else
-            {
-                context.Response.Redirect(context.RedirectUri);
-            }
-            return Task.CompletedTask;
-        };
-
-        private static bool IsAjaxRequest(HttpRequest request)
-        {
-            return string.Equals(request.Query["X-Requested-With"], "XMLHttpRequest", StringComparison.Ordinal) ||
-                string.Equals(request.Headers["X-Requested-With"], "XMLHttpRequest", StringComparison.Ordinal);
-        }		
-
-        /// <summary>
-        /// Implements the interface method by invoking the related delegate method.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <returns></returns>
-        public virtual Task ValidatePrincipal(CookieValidatePrincipalContext context) => OnValidatePrincipal(context);
-
-        /// <summary>
-        /// Implements the interface method by invoking the related delegate method.
-        /// </summary>
-        /// <param name="context"></param>
-        public virtual Task SigningIn(CookieSigningInContext context) => OnSigningIn(context);
-
-        /// <summary>
-        /// Implements the interface method by invoking the related delegate method.
-        /// </summary>
-        /// <param name="context"></param>
-        public virtual Task SignedIn(CookieSignedInContext context) => OnSignedIn(context);
-
-        /// <summary>
-        /// Implements the interface method by invoking the related delegate method.
-        /// </summary>
-        /// <param name="context"></param>
-        public virtual Task SigningOut(CookieSigningOutContext context) => OnSigningOut(context);
-
-        /// <summary>
-        /// Implements the interface method by invoking the related delegate method.
-        /// </summary>
-        /// <param name="context">Contains information about the event</param>
-        public virtual Task RedirectToLogout(RedirectContext<CookieAuthenticationOptions> context) => OnRedirectToLogout(context);
-
-        /// <summary>
-        /// Implements the interface method by invoking the related delegate method.
-        /// </summary>
-        /// <param name="context">Contains information about the event</param>
-        public virtual Task RedirectToLogin(RedirectContext<CookieAuthenticationOptions> context) => OnRedirectToLogin(context);
-
-        /// <summary>
-        /// Implements the interface method by invoking the related delegate method.
-        /// </summary>
-        /// <param name="context">Contains information about the event</param>
-        public virtual Task RedirectToReturnUrl(RedirectContext<CookieAuthenticationOptions> context) => OnRedirectToReturnUrl(context);
-
-        /// <summary>
-        /// Implements the interface method by invoking the related delegate method.
-        /// </summary>
-        /// <param name="context">Contains information about the event</param>
-        public virtual Task RedirectToAccessDenied(RedirectContext<CookieAuthenticationOptions> context) => OnRedirectToAccessDenied(context);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSignedInContext.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSignedInContext.cs
deleted file mode 100644
index 98c31dd19..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSignedInContext.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// Context object passed to the ICookieAuthenticationEvents method SignedIn.
-    /// </summary>    
-    public class CookieSignedInContext : PrincipalContext<CookieAuthenticationOptions>
-    {
-        /// <summary>
-        /// Creates a new instance of the context object.
-        /// </summary>
-        /// <param name="context">The HTTP request context</param>
-        /// <param name="scheme">The scheme data</param>
-        /// <param name="principal">Initializes Principal property</param>
-        /// <param name="properties">Initializes Properties property</param>
-        /// <param name="options">The handler options</param>
-        public CookieSignedInContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            ClaimsPrincipal principal,
-            AuthenticationProperties properties,
-            CookieAuthenticationOptions options)
-            : base(context, scheme, options, properties)
-        {
-            Principal = principal;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSigningInContext.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSigningInContext.cs
deleted file mode 100644
index 41d7b4f6a..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSigningInContext.cs
+++ /dev/null
@@ -1,42 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// Context object passed to the <see cref="CookieAuthenticationEvents.SigningIn(CookieSigningInContext)"/>.
-    /// </summary>    
-    public class CookieSigningInContext : PrincipalContext<CookieAuthenticationOptions>
-    {
-        /// <summary>
-        /// Creates a new instance of the context object.
-        /// </summary>
-        /// <param name="context">The HTTP request context</param>
-        /// <param name="scheme">The scheme data</param>
-        /// <param name="options">The handler options</param>
-        /// <param name="principal">Initializes Principal property</param>
-        /// <param name="properties">The authentication properties.</param>
-        /// <param name="cookieOptions">Initializes options for the authentication cookie.</param>
-        public CookieSigningInContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            CookieAuthenticationOptions options,
-            ClaimsPrincipal principal,
-            AuthenticationProperties properties,
-            CookieOptions cookieOptions)
-            : base(context, scheme, options, properties)
-        {
-            CookieOptions = cookieOptions;
-            Principal = principal;
-        }
-
-        /// <summary>
-        /// The options for creating the outgoing cookie.
-        /// May be replace or altered during the SigningIn call.
-        /// </summary>
-        public CookieOptions CookieOptions { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSigningOutContext.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSigningOutContext.cs
deleted file mode 100644
index 34f6e49ab..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieSigningOutContext.cs
+++ /dev/null
@@ -1,36 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// Context object passed to the <see cref="CookieAuthenticationEvents.SigningOut(CookieSigningOutContext)"/>
-    /// </summary>
-    public class CookieSigningOutContext : PropertiesContext<CookieAuthenticationOptions>
-    {
-        /// <summary>
-        /// 
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="scheme"></param>
-        /// <param name="options"></param>
-        /// <param name="properties"></param>
-        /// <param name="cookieOptions"></param>
-        public CookieSigningOutContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            CookieAuthenticationOptions options, 
-            AuthenticationProperties properties, 
-            CookieOptions cookieOptions)
-            : base(context, scheme, options, properties)
-            => CookieOptions = cookieOptions;
-
-        /// <summary>
-        /// The options for creating the outgoing cookie.
-        /// May be replace or altered during the SigningOut call.
-        /// </summary>
-        public CookieOptions CookieOptions { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieValidatePrincipalContext.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieValidatePrincipalContext.cs
deleted file mode 100644
index d2161e42a..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/Events/CookieValidatePrincipalContext.cs
+++ /dev/null
@@ -1,51 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// Context object passed to the CookieAuthenticationEvents ValidatePrincipal method.
-    /// </summary>
-    public class CookieValidatePrincipalContext : PrincipalContext<CookieAuthenticationOptions>
-    {
-        /// <summary>
-        /// Creates a new instance of the context object.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="scheme"></param>
-        /// <param name="ticket">Contains the initial values for identity and extra data</param>
-        /// <param name="options"></param>
-        public CookieValidatePrincipalContext(HttpContext context, AuthenticationScheme scheme, CookieAuthenticationOptions options, AuthenticationTicket ticket)
-            : base(context, scheme, options, ticket?.Properties)
-        {
-            if (ticket == null)
-            {
-                throw new ArgumentNullException(nameof(ticket));
-            }
-
-            Principal = ticket.Principal;
-        }
-
-        /// <summary>
-        /// If true, the cookie will be renewed
-        /// </summary>
-        public bool ShouldRenew { get; set; }
-
-        /// <summary>
-        /// Called to replace the claims principal. The supplied principal will replace the value of the 
-        /// Principal property, which determines the identity of the authenticated request.
-        /// </summary>
-        /// <param name="principal">The <see cref="ClaimsPrincipal"/> used as the replacement</param>
-        public void ReplacePrincipal(ClaimsPrincipal principal) => Principal = principal;
-
-        /// <summary>
-        /// Called to reject the incoming principal. This may be done if the application has determined the
-        /// account is no longer active, and the request should be treated as if it was anonymous.
-        /// </summary>
-        public void RejectPrincipal() => Principal = null;
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/ICookieManager.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/ICookieManager.cs
deleted file mode 100644
index 4514fefa9..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/ICookieManager.cs
+++ /dev/null
@@ -1,39 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// This is used by the CookieAuthenticationMiddleware to process request and response cookies.
-    /// It is abstracted from the normal cookie APIs to allow for complex operations like chunking.
-    /// </summary>
-    public interface ICookieManager
-    {
-        /// <summary>
-        /// Retrieve a cookie of the given name from the request.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <returns></returns>
-        string GetRequestCookie(HttpContext context, string key);
-
-        /// <summary>
-        /// Append the given cookie to the response.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <param name="value"></param>
-        /// <param name="options"></param>
-        void AppendResponseCookie(HttpContext context, string key, string value, CookieOptions options);
-
-        /// <summary>
-        /// Append a delete cookie to the response.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <param name="options"></param>
-        void DeleteCookie(HttpContext context, string key, CookieOptions options);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/ITicketStore.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/ITicketStore.cs
deleted file mode 100644
index cff11a892..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/ITicketStore.cs
+++ /dev/null
@@ -1,43 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved. See License.txt in the project root for license information.
-
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// This provides an abstract storage mechanic to preserve identity information on the server
-    /// while only sending a simple identifier key to the client. This is most commonly used to mitigate
-    /// issues with serializing large identities into cookies.
-    /// </summary>
-    public interface ITicketStore
-    {
-        /// <summary>
-        /// Store the identity ticket and return the associated key.
-        /// </summary>
-        /// <param name="ticket">The identity information to store.</param>
-        /// <returns>The key that can be used to retrieve the identity later.</returns>
-        Task<string> StoreAsync(AuthenticationTicket ticket);
-
-        /// <summary>
-        /// Tells the store that the given identity should be updated.
-        /// </summary>
-        /// <param name="key"></param>
-        /// <param name="ticket"></param>
-        /// <returns></returns>
-        Task RenewAsync(string key, AuthenticationTicket ticket);
-
-        /// <summary>
-        /// Retrieves an identity from the store for the given key.
-        /// </summary>
-        /// <param name="key">The key associated with the identity.</param>
-        /// <returns>The identity associated with the given key, or if not found.</returns>
-        Task<AuthenticationTicket> RetrieveAsync(string key);
-
-        /// <summary>
-        /// Remove the identity associated with the given key.
-        /// </summary>
-        /// <param name="key">The key associated with the identity.</param>
-        /// <returns></returns>
-        Task RemoveAsync(string key);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/LoggingExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/LoggingExtensions.cs
deleted file mode 100644
index d12735443..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/LoggingExtensions.cs
+++ /dev/null
@@ -1,35 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.Extensions.Logging
-{
-    internal static class LoggingExtensions
-    {
-        private static Action<ILogger, string, Exception> _authSchemeSignedIn;
-        private static Action<ILogger, string, Exception> _authSchemeSignedOut;
-
-        static LoggingExtensions()
-        {
-            _authSchemeSignedIn = LoggerMessage.Define<string>(
-                eventId: 10,
-                logLevel: LogLevel.Information,
-                formatString: "AuthenticationScheme: {AuthenticationScheme} signed in.");
-            _authSchemeSignedOut = LoggerMessage.Define<string>(
-                eventId: 11,
-                logLevel: LogLevel.Information,
-                formatString: "AuthenticationScheme: {AuthenticationScheme} signed out.");
-        }
-
-        public static void SignedIn(this ILogger logger, string authenticationScheme)
-        {
-            _authSchemeSignedIn(logger, authenticationScheme, null);
-        }
-
-        public static void SignedOut(this ILogger logger, string authenticationScheme)
-        {
-            _authSchemeSignedOut(logger, authenticationScheme, null);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/Microsoft.AspNetCore.Authentication.Cookies.csproj b/src/Microsoft.AspNetCore.Authentication.Cookies/Microsoft.AspNetCore.Authentication.Cookies.csproj
deleted file mode 100644
index 093f60a3d..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/Microsoft.AspNetCore.Authentication.Cookies.csproj
+++ /dev/null
@@ -1,20 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core middleware that enables an application to use cookie based authentication.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <DefineConstants>$(DefineConstants);SECURITY</DefineConstants>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <Compile Include="..\..\shared\Microsoft.AspNetCore.ChunkingCookieManager.Sources\**\*.cs" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication\Microsoft.AspNetCore.Authentication.csproj" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/PostConfigureCookieAuthenticationOptions.cs b/src/Microsoft.AspNetCore.Authentication.Cookies/PostConfigureCookieAuthenticationOptions.cs
deleted file mode 100644
index 48895072e..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/PostConfigureCookieAuthenticationOptions.cs
+++ /dev/null
@@ -1,59 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    /// <summary>
-    /// Used to setup defaults for all <see cref="CookieAuthenticationOptions"/>.
-    /// </summary>
-    public class PostConfigureCookieAuthenticationOptions : IPostConfigureOptions<CookieAuthenticationOptions>
-    {
-        private readonly IDataProtectionProvider _dp;
-
-        public PostConfigureCookieAuthenticationOptions(IDataProtectionProvider dataProtection)
-        {
-            _dp = dataProtection;
-        }
-
-        /// <summary>
-        /// Invoked to post configure a TOptions instance.
-        /// </summary>
-        /// <param name="name">The name of the options instance being configured.</param>
-        /// <param name="options">The options instance to configure.</param>
-        public void PostConfigure(string name, CookieAuthenticationOptions options)
-        {
-            options.DataProtectionProvider = options.DataProtectionProvider ?? _dp;
-
-            if (string.IsNullOrEmpty(options.Cookie.Name))
-            {
-                options.Cookie.Name = CookieAuthenticationDefaults.CookiePrefix + name;
-            }
-            if (options.TicketDataFormat == null)
-            {
-                // Note: the purpose for the data protector must remain fixed for interop to work.
-                var dataProtector = options.DataProtectionProvider.CreateProtector("Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationMiddleware", name, "v2");
-                options.TicketDataFormat = new TicketDataFormat(dataProtector);
-            }
-            if (options.CookieManager == null)
-            {
-                options.CookieManager = new ChunkingCookieManager();
-            }
-            if (!options.LoginPath.HasValue)
-            {
-                options.LoginPath = CookieAuthenticationDefaults.LoginPath;
-            }
-            if (!options.LogoutPath.HasValue)
-            {
-                options.LogoutPath = CookieAuthenticationDefaults.LogoutPath;
-            }
-            if (!options.AccessDeniedPath.HasValue)
-            {
-                options.AccessDeniedPath = CookieAuthenticationDefaults.AccessDeniedPath;
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.Cookies/baseline.netcore.json
deleted file mode 100644
index b218669b7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/baseline.netcore.json
+++ /dev/null
@@ -1,1621 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.Cookies, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.CookieExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddCookie",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddCookie",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddCookie",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddCookie",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddCookie",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.CookieAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseCookieAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseCookieAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "CookiePrefix",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "LoginPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "LogoutPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AccessDeniedPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "ReturnUrlParameter",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"Cookies\""
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.SignInAuthenticationHandler<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationEvents",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "InitializeHandlerAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Object>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "FinishResponseAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleSignInAsync",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleSignOutAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleForbiddenAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Cookie",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Cookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieBuilder"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_DataProtectionProvider",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_DataProtectionProvider",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SlidingExpiration",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SlidingExpiration",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_LoginPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_LoginPath",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.PathString"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_LogoutPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_LogoutPath",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.PathString"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AccessDeniedPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AccessDeniedPath",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.PathString"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ReturnUrlParameter",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ReturnUrlParameter",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationEvents",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TicketDataFormat",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TicketDataFormat",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationTicket>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieManager",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.Cookies.ICookieManager",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieManager",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.ICookieManager"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SessionStore",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.Cookies.ITicketStore",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SessionStore",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.ITicketStore"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ExpireTimeSpan",
-          "Parameters": [],
-          "ReturnType": "System.TimeSpan",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ExpireTimeSpan",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.TimeSpan"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieName",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieDomain",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieDomain",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookiePath",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookiePath",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieHttpOnly",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieHttpOnly",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieSecure",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieSecurePolicy",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieSecure",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieSecurePolicy"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationEvents",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_OnValidatePrincipal",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.Cookies.CookieValidatePrincipalContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnValidatePrincipal",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.Cookies.CookieValidatePrincipalContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnSigningIn",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.Cookies.CookieSigningInContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnSigningIn",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.Cookies.CookieSigningInContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnSignedIn",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.Cookies.CookieSignedInContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnSignedIn",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.Cookies.CookieSignedInContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnSigningOut",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.Cookies.CookieSigningOutContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnSigningOut",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.Cookies.CookieSigningOutContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToLogin",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToLogin",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToAccessDenied",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToAccessDenied",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToLogout",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToLogout",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToReturnUrl",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToReturnUrl",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ValidatePrincipal",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieValidatePrincipalContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SigningIn",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieSigningInContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SignedIn",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieSignedInContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SigningOut",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieSigningOutContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToLogout",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToLogin",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToReturnUrl",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToAccessDenied",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.CookieSignedInContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.PrincipalContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.CookieSigningInContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.PrincipalContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_CookieOptions",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieOptions",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieOptions",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions"
-            },
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "cookieOptions",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.CookieSigningOutContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.PropertiesContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_CookieOptions",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieOptions",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieOptions",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "cookieOptions",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.CookieValidatePrincipalContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.PrincipalContext<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ShouldRenew",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ShouldRenew",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ReplacePrincipal",
-          "Parameters": [
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RejectPrincipal",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions"
-            },
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationTicket"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.ICookieManager",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "GetRequestCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AppendResponseCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            },
-            {
-              "Name": "value",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "DeleteCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.ITicketStore",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "StoreAsync",
-          "Parameters": [
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationTicket"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<System.String>",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RenewAsync",
-          "Parameters": [
-            {
-              "Name": "key",
-              "Type": "System.String"
-            },
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationTicket"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RetrieveAsync",
-          "Parameters": [
-            {
-              "Name": "key",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RemoveAsync",
-          "Parameters": [
-            {
-              "Name": "key",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.PostConfigureCookieAuthenticationOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "PostConfigure",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "dataProtection",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Cookies.ChunkingCookieManager",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.Cookies.ICookieManager"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ChunkSize",
-          "Parameters": [],
-          "ReturnType": "System.Nullable<System.Int32>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ChunkSize",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Nullable<System.Int32>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ThrowForPartialCookies",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ThrowForPartialCookies",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "GetRequestCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.Cookies.ICookieManager",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AppendResponseCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            },
-            {
-              "Name": "value",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.Cookies.ICookieManager",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "DeleteCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.Cookies.ICookieManager",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "DefaultChunkSize",
-          "Parameters": [],
-          "ReturnType": "System.Int32",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "4050"
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Cookies/breakingchanges.netcore.json b/src/Microsoft.AspNetCore.Authentication.Cookies/breakingchanges.netcore.json
deleted file mode 100644
index 7a1ab7962..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Cookies/breakingchanges.netcore.json
+++ /dev/null
@@ -1,52 +0,0 @@
-  [
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public Microsoft.AspNetCore.Http.CookieSecurePolicy get_CookieSecure()",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.Boolean get_CookieHttpOnly()",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.String get_CookieDomain()",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.String get_CookieName()",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.String get_CookiePath()",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.Void set_CookieDomain(System.String value)",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.Void set_CookieHttpOnly(System.Boolean value)",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.Void set_CookieName(System.String value)",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.Void set_CookiePath(System.String value)",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationOptions : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "MemberId": "public System.Void set_CookieSecure(Microsoft.AspNetCore.Http.CookieSecurePolicy value)",
-      "Kind": "Removal"
-    }
-  ]
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookAppBuilderExtensions.cs
deleted file mode 100644
index a94dc7bc4..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookAppBuilderExtensions.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.Facebook;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add Facebook authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class FacebookAppBuilderExtensions
-    {
-        /// <summary>
-        /// UseFacebookAuthentication is obsolete. Configure Facebook authentication with AddAuthentication().AddFacebook in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseFacebookAuthentication is obsolete. Configure Facebook authentication with AddAuthentication().AddFacebook in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseFacebookAuthentication(this IApplicationBuilder app)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-
-        /// <summary>
-        /// UseFacebookAuthentication is obsolete. Configure Facebook authentication with AddAuthentication().AddFacebook in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">A <see cref="FacebookOptions"/> that specifies options for the handler.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseFacebookAuthentication is obsolete. Configure Facebook authentication with AddAuthentication().AddFacebook in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseFacebookAuthentication(this IApplicationBuilder app, FacebookOptions options)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookDefaults.cs b/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookDefaults.cs
deleted file mode 100644
index ff9bb40bf..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookDefaults.cs
+++ /dev/null
@@ -1,19 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.Facebook
-{
-    public static class FacebookDefaults
-    {
-        public const string AuthenticationScheme = "Facebook";
-
-        public static readonly string DisplayName = "Facebook";
-
-        // https://developers.facebook.com/docs/facebook-login/manually-build-a-login-flow#login
-        public static readonly string AuthorizationEndpoint = "https://www.facebook.com/v3.1/dialog/oauth";
-
-        public static readonly string TokenEndpoint = "https://graph.facebook.com/v3.1/oauth/access_token";
-
-        public static readonly string UserInformationEndpoint = "https://graph.facebook.com/v3.1/me";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookExtensions.cs
deleted file mode 100644
index 2273724a4..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookExtensions.cs
+++ /dev/null
@@ -1,24 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Facebook;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    public static class FacebookAuthenticationOptionsExtensions
-    {
-        public static AuthenticationBuilder AddFacebook(this AuthenticationBuilder builder)
-            => builder.AddFacebook(FacebookDefaults.AuthenticationScheme, _ => { });
-
-        public static AuthenticationBuilder AddFacebook(this AuthenticationBuilder builder, Action<FacebookOptions> configureOptions)
-            => builder.AddFacebook(FacebookDefaults.AuthenticationScheme, configureOptions);
-
-        public static AuthenticationBuilder AddFacebook(this AuthenticationBuilder builder, string authenticationScheme, Action<FacebookOptions> configureOptions)
-            => builder.AddFacebook(authenticationScheme, FacebookDefaults.DisplayName, configureOptions);
-
-        public static AuthenticationBuilder AddFacebook(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<FacebookOptions> configureOptions)
-            => builder.AddOAuth<FacebookOptions, FacebookHandler>(authenticationScheme, displayName, configureOptions);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookHandler.cs b/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookHandler.cs
deleted file mode 100644
index eb4251143..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookHandler.cs
+++ /dev/null
@@ -1,80 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Globalization;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Security.Cryptography;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.WebUtilities;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.Facebook
-{
-    public class FacebookHandler : OAuthHandler<FacebookOptions>
-    {
-        public FacebookHandler(IOptionsMonitor<FacebookOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        { }
-
-        protected override async Task<AuthenticationTicket> CreateTicketAsync(ClaimsIdentity identity, AuthenticationProperties properties, OAuthTokenResponse tokens)
-        {
-            var endpoint = QueryHelpers.AddQueryString(Options.UserInformationEndpoint, "access_token", tokens.AccessToken);
-            if (Options.SendAppSecretProof)
-            {
-                endpoint = QueryHelpers.AddQueryString(endpoint, "appsecret_proof", GenerateAppSecretProof(tokens.AccessToken));
-            }
-            if (Options.Fields.Count > 0)
-            {
-                endpoint = QueryHelpers.AddQueryString(endpoint, "fields", string.Join(",", Options.Fields));
-            }
-
-            var response = await Backchannel.GetAsync(endpoint, Context.RequestAborted);
-            if (!response.IsSuccessStatusCode)
-            {
-                throw new HttpRequestException($"An error occurred when retrieving Facebook user information ({response.StatusCode}). Please check if the authentication information is correct and the corresponding Facebook Graph API is enabled.");
-            }
-
-            var payload = JObject.Parse(await response.Content.ReadAsStringAsync());
-
-            var context = new OAuthCreatingTicketContext(new ClaimsPrincipal(identity), properties, Context, Scheme, Options, Backchannel, tokens, payload);
-            context.RunClaimActions();
-
-            await Events.CreatingTicket(context);
-
-            return new AuthenticationTicket(context.Principal, context.Properties, Scheme.Name);
-
-        }
-
-        private string GenerateAppSecretProof(string accessToken)
-        {
-            using (var algorithm = new HMACSHA256(Encoding.ASCII.GetBytes(Options.AppSecret)))
-            {
-                var hash = algorithm.ComputeHash(Encoding.ASCII.GetBytes(accessToken));
-                var builder = new StringBuilder();
-                for (int i = 0; i < hash.Length; i++)
-                {
-                    builder.Append(hash[i].ToString("x2", CultureInfo.InvariantCulture));
-                }
-                return builder.ToString();
-            }
-        }
-
-        protected override string FormatScope(IEnumerable<string> scopes)
-        {
-            // Facebook deviates from the OAuth spec here. They require comma separated instead of space separated.
-            // https://developers.facebook.com/docs/reference/dialogs/oauth
-            // http://tools.ietf.org/html/rfc6749#section-3.3
-            return string.Join(",", scopes);
-        }
-
-        protected override string FormatScope()
-            => base.FormatScope();
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookOptions.cs b/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookOptions.cs
deleted file mode 100644
index c2078a017..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/FacebookOptions.cs
+++ /dev/null
@@ -1,101 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication;
-using System.Globalization;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Facebook
-{
-    /// <summary>
-    /// Configuration options for <see cref="FacebookHandler"/>.
-    /// </summary>
-    public class FacebookOptions : OAuthOptions
-    {
-        /// <summary>
-        /// Initializes a new <see cref="FacebookOptions"/>.
-        /// </summary>
-        public FacebookOptions()
-        {
-            CallbackPath = new PathString("/signin-facebook");
-            SendAppSecretProof = true;
-            AuthorizationEndpoint = FacebookDefaults.AuthorizationEndpoint;
-            TokenEndpoint = FacebookDefaults.TokenEndpoint;
-            UserInformationEndpoint = FacebookDefaults.UserInformationEndpoint;
-            Scope.Add("email");
-            Fields.Add("name");
-            Fields.Add("email");
-            Fields.Add("first_name");
-            Fields.Add("last_name");
-
-            ClaimActions.MapJsonKey(ClaimTypes.NameIdentifier, "id");
-            ClaimActions.MapJsonSubKey("urn:facebook:age_range_min", "age_range", "min");
-            ClaimActions.MapJsonSubKey("urn:facebook:age_range_max", "age_range", "max");
-            ClaimActions.MapJsonKey(ClaimTypes.DateOfBirth, "birthday");
-            ClaimActions.MapJsonKey(ClaimTypes.Email, "email");
-            ClaimActions.MapJsonKey(ClaimTypes.Name, "name");
-            ClaimActions.MapJsonKey(ClaimTypes.GivenName, "first_name");
-            ClaimActions.MapJsonKey("urn:facebook:middle_name", "middle_name");
-            ClaimActions.MapJsonKey(ClaimTypes.Surname, "last_name");
-            ClaimActions.MapJsonKey(ClaimTypes.Gender, "gender");
-            ClaimActions.MapJsonKey("urn:facebook:link", "link");
-            ClaimActions.MapJsonSubKey("urn:facebook:location", "location", "name");
-            ClaimActions.MapJsonKey(ClaimTypes.Locality, "locale");
-            ClaimActions.MapJsonKey("urn:facebook:timezone", "timezone");
-        }
-
-        /// <summary>
-        /// Check that the options are valid.  Should throw an exception if things are not ok.
-        /// </summary>
-        public override void Validate()
-        {
-            if (string.IsNullOrEmpty(AppId))
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(AppId)), nameof(AppId));
-            }
-
-            if (string.IsNullOrEmpty(AppSecret))
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(AppSecret)), nameof(AppSecret));
-            }
-
-            base.Validate();
-        }
-
-        // Facebook uses a non-standard term for this field.
-        /// <summary>
-        /// Gets or sets the Facebook-assigned appId.
-        /// </summary>
-        public string AppId
-        {
-            get { return ClientId; }
-            set { ClientId = value; }
-        }
-
-        // Facebook uses a non-standard term for this field.
-        /// <summary>
-        /// Gets or sets the Facebook-assigned app secret.
-        /// </summary>
-        public string AppSecret
-        {
-            get { return ClientSecret; }
-            set { ClientSecret = value; }
-        }
-
-        /// <summary>
-        /// Gets or sets if the appsecret_proof should be generated and sent with Facebook API calls.
-        /// This is enabled by default.
-        /// </summary>
-        public bool SendAppSecretProof { get; set; }
-
-        /// <summary>
-        /// The list of fields to retrieve from the UserInformationEndpoint.
-        /// https://developers.facebook.com/docs/graph-api/reference/user
-        /// </summary>
-        public ICollection<string> Fields { get; } = new HashSet<string>();
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/Microsoft.AspNetCore.Authentication.Facebook.csproj b/src/Microsoft.AspNetCore.Authentication.Facebook/Microsoft.AspNetCore.Authentication.Facebook.csproj
deleted file mode 100644
index f57fe26e0..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/Microsoft.AspNetCore.Authentication.Facebook.csproj
+++ /dev/null
@@ -1,15 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core middleware that enables an application to support Facebook's OAuth 2.0 authentication workflow.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication.OAuth\Microsoft.AspNetCore.Authentication.OAuth.csproj" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication.Facebook/Properties/Resources.Designer.cs
deleted file mode 100644
index 655da24a3..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,44 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication.Facebook
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.Facebook.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string Exception_OptionMustBeProvided
-        {
-            get => GetString("Exception_OptionMustBeProvided");
-        }
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string FormatException_OptionMustBeProvided(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_OptionMustBeProvided"), p0);
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/Resources.resx b/src/Microsoft.AspNetCore.Authentication.Facebook/Resources.resx
deleted file mode 100644
index 56ef7f56b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/Resources.resx
+++ /dev/null
@@ -1,123 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_OptionMustBeProvided" xml:space="preserve">
-    <value>The '{0}' option must be provided.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Facebook/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.Facebook/baseline.netcore.json
deleted file mode 100644
index 5d95efca6..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Facebook/baseline.netcore.json
+++ /dev/null
@@ -1,390 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.Facebook, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.FacebookAuthenticationOptionsExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddFacebook",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddFacebook",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Facebook.FacebookOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddFacebook",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Facebook.FacebookOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddFacebook",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Facebook.FacebookOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Facebook.FacebookDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "DisplayName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthorizationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "TokenEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "UserInformationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"Facebook\""
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Facebook.FacebookHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthHandler<Microsoft.AspNetCore.Authentication.Facebook.FacebookOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "CreateTicketAsync",
-          "Parameters": [
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "tokens",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "FormatScope",
-          "Parameters": [
-            {
-              "Name": "scopes",
-              "Type": "System.Collections.Generic.IEnumerable<System.String>"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "FormatScope",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.Facebook.FacebookOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Facebook.FacebookOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AppId",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AppId",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AppSecret",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AppSecret",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SendAppSecretProof",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SendAppSecretProof",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Fields",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.ICollection<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.FacebookAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseFacebookAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseFacebookAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Facebook.FacebookOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/GoogleAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Google/GoogleAppBuilderExtensions.cs
deleted file mode 100644
index 4302d20db..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/GoogleAppBuilderExtensions.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.Google;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add Google authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class GoogleAppBuilderExtensions
-    {
-        /// <summary>
-        /// UseGoogleAuthentication is obsolete. Configure Google authentication with AddAuthentication().AddGoogle in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseGoogleAuthentication is obsolete. Configure Google authentication with AddAuthentication().AddGoogle in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseGoogleAuthentication(this IApplicationBuilder app)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-
-        /// <summary>
-        /// UseGoogleAuthentication is obsolete. Configure Google authentication with AddAuthentication().AddGoogle in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">A <see cref="GoogleOptions"/> that specifies options for the handler.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseGoogleAuthentication is obsolete. Configure Google authentication with AddAuthentication().AddGoogle in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseGoogleAuthentication(this IApplicationBuilder app, GoogleOptions options)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/GoogleChallengeProperties.cs b/src/Microsoft.AspNetCore.Authentication.Google/GoogleChallengeProperties.cs
deleted file mode 100644
index 714df4565..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/GoogleChallengeProperties.cs
+++ /dev/null
@@ -1,89 +0,0 @@
-using System.Collections.Generic;
-using Microsoft.AspNetCore.Authentication.OAuth;
-
-namespace Microsoft.AspNetCore.Authentication.Google
-{
-    public class GoogleChallengeProperties : OAuthChallengeProperties
-    {
-        /// <summary>
-        /// The parameter key for the "access_type" argument being used for a challenge request.
-        /// </summary>
-        public static readonly string AccessTypeKey = "access_type";
-
-        /// <summary>
-        /// The parameter key for the "approval_prompt" argument being used for a challenge request.
-        /// </summary>
-        public static readonly string ApprovalPromptKey = "approval_prompt";
-
-        /// <summary>
-        /// The parameter key for the "include_granted_scopes" argument being used for a challenge request.
-        /// </summary>
-        public static readonly string IncludeGrantedScopesKey = "include_granted_scopes";
-
-        /// <summary>
-        /// The parameter key for the "login_hint" argument being used for a challenge request.
-        /// </summary>
-        public static readonly string LoginHintKey = "login_hint";
-
-        /// <summary>
-        /// The parameter key for the "prompt" argument being used for a challenge request.
-        /// </summary>
-        public static readonly string PromptParameterKey = "prompt";
-
-        public GoogleChallengeProperties()
-        { }
-
-        public GoogleChallengeProperties(IDictionary<string, string> items)
-            : base(items)
-        { }
-
-        public GoogleChallengeProperties(IDictionary<string, string> items, IDictionary<string, object> parameters)
-            : base(items, parameters)
-        { }
-
-        /// <summary>
-        /// The "access_type" parameter value being used for a challenge request.
-        /// </summary>
-        public string AccessType
-        {
-            get => GetParameter<string>(AccessTypeKey);
-            set => SetParameter(AccessTypeKey, value);
-        }
-
-        /// <summary>
-        /// The "approval_prompt" parameter value being used for a challenge request.
-        /// </summary>
-        public string ApprovalPrompt
-        {
-            get => GetParameter<string>(ApprovalPromptKey);
-            set => SetParameter(ApprovalPromptKey, value);
-        }
-
-        /// <summary>
-        /// The "include_granted_scopes" parameter value being used for a challenge request.
-        /// </summary>
-        public bool? IncludeGrantedScopes
-        {
-            get => GetParameter<bool?>(IncludeGrantedScopesKey);
-            set => SetParameter(IncludeGrantedScopesKey, value);
-        }
-
-        /// <summary>
-        /// The "login_hint" parameter value being used for a challenge request.
-        /// </summary>
-        public string LoginHint
-        {
-            get => GetParameter<string>(LoginHintKey);
-            set => SetParameter(LoginHintKey, value);
-        }
-
-        /// <summary>
-        /// The "prompt" parameter value being used for a challenge request.
-        /// </summary>
-        public string Prompt
-        {
-            get => GetParameter<string>(PromptParameterKey);
-            set => SetParameter(PromptParameterKey, value);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/GoogleDefaults.cs b/src/Microsoft.AspNetCore.Authentication.Google/GoogleDefaults.cs
deleted file mode 100644
index 26b3b8f01..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/GoogleDefaults.cs
+++ /dev/null
@@ -1,23 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.Google
-{
-    /// <summary>
-    /// Default values for Google authentication
-    /// </summary>
-    public static class GoogleDefaults
-    {
-        public const string AuthenticationScheme = "Google";
-
-        public static readonly string DisplayName = "Google";
-
-        // https://developers.google.com/identity/protocols/OAuth2WebServer
-        public static readonly string AuthorizationEndpoint = "https://accounts.google.com/o/oauth2/v2/auth";
-
-        public static readonly string TokenEndpoint = "https://www.googleapis.com/oauth2/v4/token";
-
-        // https://developers.google.com/+/web/people/
-        public static readonly string UserInformationEndpoint = "https://www.googleapis.com/plus/v1/people/me";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/GoogleExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Google/GoogleExtensions.cs
deleted file mode 100644
index 95547014c..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/GoogleExtensions.cs
+++ /dev/null
@@ -1,24 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Google;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    public static class GoogleExtensions
-    {
-        public static AuthenticationBuilder AddGoogle(this AuthenticationBuilder builder)
-            => builder.AddGoogle(GoogleDefaults.AuthenticationScheme, _ => { });
-
-        public static AuthenticationBuilder AddGoogle(this AuthenticationBuilder builder, Action<GoogleOptions> configureOptions)
-            => builder.AddGoogle(GoogleDefaults.AuthenticationScheme, configureOptions);
-
-        public static AuthenticationBuilder AddGoogle(this AuthenticationBuilder builder, string authenticationScheme, Action<GoogleOptions> configureOptions)
-            => builder.AddGoogle(authenticationScheme, GoogleDefaults.DisplayName, configureOptions);
-
-        public static AuthenticationBuilder AddGoogle(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<GoogleOptions> configureOptions)
-            => builder.AddOAuth<GoogleOptions, GoogleHandler>(authenticationScheme, displayName, configureOptions);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/GoogleHandler.cs b/src/Microsoft.AspNetCore.Authentication.Google/GoogleHandler.cs
deleted file mode 100644
index 88d48d446..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/GoogleHandler.cs
+++ /dev/null
@@ -1,108 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Net.Http;
-using System.Net.Http.Headers;
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.WebUtilities;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.Google
-{
-    public class GoogleHandler : OAuthHandler<GoogleOptions>
-    {
-        public GoogleHandler(IOptionsMonitor<GoogleOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        { }
-
-        protected override async Task<AuthenticationTicket> CreateTicketAsync(
-            ClaimsIdentity identity,
-            AuthenticationProperties properties,
-            OAuthTokenResponse tokens)
-        {
-            // Get the Google user
-            var request = new HttpRequestMessage(HttpMethod.Get, Options.UserInformationEndpoint);
-            request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", tokens.AccessToken);
-
-            var response = await Backchannel.SendAsync(request, Context.RequestAborted);
-            if (!response.IsSuccessStatusCode)
-            {
-                throw new HttpRequestException($"An error occurred when retrieving Google user information ({response.StatusCode}). Please check if the authentication information is correct and the corresponding Google+ API is enabled.");
-            }
-
-            var payload = JObject.Parse(await response.Content.ReadAsStringAsync());
-
-            var context = new OAuthCreatingTicketContext(new ClaimsPrincipal(identity), properties, Context, Scheme, Options, Backchannel, tokens, payload);
-            context.RunClaimActions();
-
-            await Events.CreatingTicket(context);
-            return new AuthenticationTicket(context.Principal, context.Properties, Scheme.Name);
-        }
-
-        // TODO: Abstract this properties override pattern into the base class?
-        protected override string BuildChallengeUrl(AuthenticationProperties properties, string redirectUri)
-        {
-            // Google Identity Platform Manual:
-            // https://developers.google.com/identity/protocols/OAuth2WebServer
-
-            var queryStrings = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase);
-            queryStrings.Add("response_type", "code");
-            queryStrings.Add("client_id", Options.ClientId);
-            queryStrings.Add("redirect_uri", redirectUri);
-
-            AddQueryString(queryStrings, properties, GoogleChallengeProperties.ScopeKey, FormatScope, Options.Scope);
-            AddQueryString(queryStrings, properties, GoogleChallengeProperties.AccessTypeKey, Options.AccessType);
-            AddQueryString(queryStrings, properties, GoogleChallengeProperties.ApprovalPromptKey);
-            AddQueryString(queryStrings, properties, GoogleChallengeProperties.PromptParameterKey);
-            AddQueryString(queryStrings, properties, GoogleChallengeProperties.LoginHintKey);
-            AddQueryString(queryStrings, properties, GoogleChallengeProperties.IncludeGrantedScopesKey, v => v?.ToString().ToLower(), (bool?)null);
-
-            var state = Options.StateDataFormat.Protect(properties);
-            queryStrings.Add("state", state);
-
-            var authorizationEndpoint = QueryHelpers.AddQueryString(Options.AuthorizationEndpoint, queryStrings);
-            return authorizationEndpoint;
-        }
-
-        private void AddQueryString<T>(
-            IDictionary<string, string> queryStrings,
-            AuthenticationProperties properties,
-            string name,
-            Func<T, string> formatter,
-            T defaultValue)
-        {
-            string value = null;
-            var parameterValue = properties.GetParameter<T>(name);
-            if (parameterValue != null)
-            {
-                value = formatter(parameterValue);
-            }
-            else if (!properties.Items.TryGetValue(name, out value))
-            {
-                value = formatter(defaultValue);
-            }
-
-            // Remove the parameter from AuthenticationProperties so it won't be serialized into the state
-            properties.Items.Remove(name);
-
-            if (value != null)
-            {
-                queryStrings[name] = value;
-            }
-        }
-
-        private void AddQueryString(
-            IDictionary<string, string> queryStrings,
-            AuthenticationProperties properties,
-            string name,
-            string defaultValue = null)
-            => AddQueryString(queryStrings, properties, name, x => x, defaultValue);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/GoogleHelper.cs b/src/Microsoft.AspNetCore.Authentication.Google/GoogleHelper.cs
deleted file mode 100644
index 2cac949a0..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/GoogleHelper.cs
+++ /dev/null
@@ -1,50 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.Google
-{
-    /// <summary>
-    /// Contains static methods that allow to extract user's information from a <see cref="JObject"/>
-    /// instance retrieved from Google after a successful authentication process.
-    /// </summary>
-    public static class GoogleHelper
-    {
-        /// <summary>
-        /// Gets the user's email.
-        /// </summary>
-        public static string GetEmail(JObject user)
-        {
-            if (user == null)
-            {
-                throw new ArgumentNullException(nameof(user));
-            }
-
-            return TryGetFirstValue(user, "emails", "value");
-        }
-
-        // Get the given subProperty from a list property.
-        private static string TryGetFirstValue(JObject user, string propertyName, string subProperty)
-        {
-            JToken value;
-            if (user.TryGetValue(propertyName, out value))
-            {
-                var array = JArray.Parse(value.ToString());
-                if (array != null && array.Count > 0)
-                {
-                    var subObject = JObject.Parse(array.First.ToString());
-                    if (subObject != null)
-                    {
-                        if (subObject.TryGetValue(subProperty, out value))
-                        {
-                            return value.ToString();
-                        }
-                    }
-                }
-            }
-            return null;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/GoogleOptions.cs b/src/Microsoft.AspNetCore.Authentication.Google/GoogleOptions.cs
deleted file mode 100644
index 34028bc52..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/GoogleOptions.cs
+++ /dev/null
@@ -1,42 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Google
-{
-    /// <summary>
-    /// Configuration options for <see cref="GoogleHandler"/>.
-    /// </summary>
-    public class GoogleOptions : OAuthOptions
-    {
-        /// <summary>
-        /// Initializes a new <see cref="GoogleOptions"/>.
-        /// </summary>
-        public GoogleOptions()
-        {
-            CallbackPath = new PathString("/signin-google");
-            AuthorizationEndpoint = GoogleDefaults.AuthorizationEndpoint;
-            TokenEndpoint = GoogleDefaults.TokenEndpoint;
-            UserInformationEndpoint = GoogleDefaults.UserInformationEndpoint;
-            Scope.Add("openid");
-            Scope.Add("profile");
-            Scope.Add("email");
-
-            ClaimActions.MapJsonKey(ClaimTypes.NameIdentifier, "id");
-            ClaimActions.MapJsonKey(ClaimTypes.Name, "displayName");
-            ClaimActions.MapJsonSubKey(ClaimTypes.GivenName, "name", "givenName");
-            ClaimActions.MapJsonSubKey(ClaimTypes.Surname, "name", "familyName");
-            ClaimActions.MapJsonKey("urn:google:profile", "url");
-            ClaimActions.MapCustomJson(ClaimTypes.Email, GoogleHelper.GetEmail);
-        }
-
-        /// <summary>
-        /// access_type. Set to 'offline' to request a refresh token.
-        /// </summary>
-        public string AccessType { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/Microsoft.AspNetCore.Authentication.Google.csproj b/src/Microsoft.AspNetCore.Authentication.Google/Microsoft.AspNetCore.Authentication.Google.csproj
deleted file mode 100644
index eba5b98ad..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/Microsoft.AspNetCore.Authentication.Google.csproj
+++ /dev/null
@@ -1,15 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core contains middleware to support Google's OpenId and OAuth 2.0 authentication workflows.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication.OAuth\Microsoft.AspNetCore.Authentication.OAuth.csproj" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication.Google/Properties/Resources.Designer.cs
deleted file mode 100644
index 03448b408..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,58 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication.Google
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.Google.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string Exception_OptionMustBeProvided
-        {
-            get => GetString("Exception_OptionMustBeProvided");
-        }
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string FormatException_OptionMustBeProvided(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_OptionMustBeProvided"), p0);
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string Exception_ValidatorHandlerMismatch
-        {
-            get => GetString("Exception_ValidatorHandlerMismatch");
-        }
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string FormatException_ValidatorHandlerMismatch()
-            => GetString("Exception_ValidatorHandlerMismatch");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/Resources.resx b/src/Microsoft.AspNetCore.Authentication.Google/Resources.resx
deleted file mode 100644
index 2a19bea96..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/Resources.resx
+++ /dev/null
@@ -1,126 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_OptionMustBeProvided" xml:space="preserve">
-    <value>The '{0}' option must be provided.</value>
-  </data>
-  <data name="Exception_ValidatorHandlerMismatch" xml:space="preserve">
-    <value>An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Google/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.Google/baseline.netcore.json
deleted file mode 100644
index 0a623b3b8..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Google/baseline.netcore.json
+++ /dev/null
@@ -1,550 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.Google, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.GoogleExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddGoogle",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddGoogle",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Google.GoogleOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddGoogle",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Google.GoogleOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddGoogle",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Google.GoogleOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Google.GoogleChallengeProperties",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthChallengeProperties",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_AccessType",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AccessType",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ApprovalPrompt",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ApprovalPrompt",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_IncludeGrantedScopes",
-          "Parameters": [],
-          "ReturnType": "System.Nullable<System.Boolean>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_IncludeGrantedScopes",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Nullable<System.Boolean>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_LoginHint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_LoginHint",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Prompt",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Prompt",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "items",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.String>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "items",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.String>"
-            },
-            {
-              "Name": "parameters",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.Object>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AccessTypeKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "ApprovalPromptKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "IncludeGrantedScopesKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "LoginHintKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "PromptParameterKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Google.GoogleDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "DisplayName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthorizationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "TokenEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "UserInformationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"Google\""
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Google.GoogleHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthHandler<Microsoft.AspNetCore.Authentication.Google.GoogleOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "CreateTicketAsync",
-          "Parameters": [
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "tokens",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "BuildChallengeUrl",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "redirectUri",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.Google.GoogleOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Google.GoogleHelper",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "GetEmail",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Google.GoogleOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_AccessType",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AccessType",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.GoogleAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseGoogleAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseGoogleAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Google.GoogleOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/AuthenticationFailedContext.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/AuthenticationFailedContext.cs
deleted file mode 100644
index 1c2efd6c7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/AuthenticationFailedContext.cs
+++ /dev/null
@@ -1,19 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    public class AuthenticationFailedContext : ResultContext<JwtBearerOptions>
-    {
-        public AuthenticationFailedContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            JwtBearerOptions options)
-            : base(context, scheme, options) { }
-
-        public Exception Exception { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/JwtBearerChallengeContext.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/JwtBearerChallengeContext.cs
deleted file mode 100644
index 6500e1e3f..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/JwtBearerChallengeContext.cs
+++ /dev/null
@@ -1,53 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    public class JwtBearerChallengeContext : PropertiesContext<JwtBearerOptions>
-    {
-        public JwtBearerChallengeContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            JwtBearerOptions options,
-            AuthenticationProperties properties)
-            : base(context, scheme, options, properties) { }
-
-        /// <summary>
-        /// Any failures encountered during the authentication process.
-        /// </summary>
-        public Exception AuthenticateFailure { get; set; }
-
-        /// <summary>
-        /// Gets or sets the "error" value returned to the caller as part
-        /// of the WWW-Authenticate header. This property may be null when
-        /// <see cref="JwtBearerOptions.IncludeErrorDetails"/> is set to <c>false</c>.
-        /// </summary>
-        public string Error { get; set; }
-
-        /// <summary>
-        /// Gets or sets the "error_description" value returned to the caller as part
-        /// of the WWW-Authenticate header. This property may be null when
-        /// <see cref="JwtBearerOptions.IncludeErrorDetails"/> is set to <c>false</c>.
-        /// </summary>
-        public string ErrorDescription { get; set; }
-
-        /// <summary>
-        /// Gets or sets the "error_uri" value returned to the caller as part of the
-        /// WWW-Authenticate header. This property is always null unless explicitly set.
-        /// </summary>
-        public string ErrorUri { get; set; }
-
-        /// <summary>
-        /// If true, will skip any default logic for this challenge.
-        /// </summary>
-        public bool Handled { get; private set; }
-
-        /// <summary>
-        /// Skips any default logic for this challenge.
-        /// </summary>
-        public void HandleResponse() => Handled = true;
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/JwtBearerEvents.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/JwtBearerEvents.cs
deleted file mode 100644
index a9b35c310..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/JwtBearerEvents.cs
+++ /dev/null
@@ -1,42 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    /// <summary>
-    /// Specifies events which the <see cref="JwtBearerHandler"/> invokes to enable developer control over the authentication process.
-    /// </summary>
-    public class JwtBearerEvents
-    {
-        /// <summary>
-        /// Invoked if exceptions are thrown during request processing. The exceptions will be re-thrown after this event unless suppressed.
-        /// </summary>
-        public Func<AuthenticationFailedContext, Task> OnAuthenticationFailed { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked when a protocol message is first received.
-        /// </summary>
-        public Func<MessageReceivedContext, Task> OnMessageReceived { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked after the security token has passed validation and a ClaimsIdentity has been generated.
-        /// </summary>
-        public Func<TokenValidatedContext, Task> OnTokenValidated { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked before a challenge is sent back to the caller.
-        /// </summary>
-        public Func<JwtBearerChallengeContext, Task> OnChallenge { get; set; } = context => Task.CompletedTask;
-
-        public virtual Task AuthenticationFailed(AuthenticationFailedContext context) => OnAuthenticationFailed(context);
-
-        public virtual Task MessageReceived(MessageReceivedContext context) => OnMessageReceived(context);
-
-        public virtual Task TokenValidated(TokenValidatedContext context) => OnTokenValidated(context);
-
-        public virtual Task Challenge(JwtBearerChallengeContext context) => OnChallenge(context);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/MessageReceivedContext.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/MessageReceivedContext.cs
deleted file mode 100644
index 1850ad049..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/MessageReceivedContext.cs
+++ /dev/null
@@ -1,21 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    public class MessageReceivedContext : ResultContext<JwtBearerOptions>
-    {
-        public MessageReceivedContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            JwtBearerOptions options)
-            : base(context, scheme, options) { }
-
-        /// <summary>
-        /// Bearer Token. This will give the application an opportunity to retrieve a token from an alternative location.
-        /// </summary>
-        public string Token { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/TokenValidatedContext.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/TokenValidatedContext.cs
deleted file mode 100644
index 39b677b96..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Events/TokenValidatedContext.cs
+++ /dev/null
@@ -1,19 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Tokens;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    public class TokenValidatedContext : ResultContext<JwtBearerOptions>
-    {
-        public TokenValidatedContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            JwtBearerOptions options)
-            : base(context, scheme, options) { }
-
-        public SecurityToken SecurityToken { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerAppBuilderExtensions.cs
deleted file mode 100644
index 0cfc97573..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerAppBuilderExtensions.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.JwtBearer;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add OpenIdConnect Bearer authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class JwtBearerAppBuilderExtensions
-    {
-        /// <summary>
-        /// UseJwtBearerAuthentication is obsolete. Configure JwtBearer authentication with AddAuthentication().AddJwtBearer in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseJwtBearerAuthentication is obsolete. Configure JwtBearer authentication with AddAuthentication().AddJwtBearer in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseJwtBearerAuthentication(this IApplicationBuilder app)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-
-        /// <summary>
-        /// UseJwtBearerAuthentication is obsolete. Configure JwtBearer authentication with AddAuthentication().AddJwtBearer in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">A  <see cref="JwtBearerOptions"/> that specifies options for the handler.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseJwtBearerAuthentication is obsolete. Configure JwtBearer authentication with AddAuthentication().AddJwtBearer in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseJwtBearerAuthentication(this IApplicationBuilder app, JwtBearerOptions options)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerDefaults.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerDefaults.cs
deleted file mode 100644
index 649edf94b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerDefaults.cs
+++ /dev/null
@@ -1,16 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    /// <summary>
-    /// Default values used by bearer authentication.
-    /// </summary>
-    public static class JwtBearerDefaults
-    {
-        /// <summary>
-        /// Default value for AuthenticationScheme property in the JwtBearerAuthenticationOptions
-        /// </summary>
-        public const string AuthenticationScheme = "Bearer";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerExtensions.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerExtensions.cs
deleted file mode 100644
index 334407c0d..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerExtensions.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.JwtBearer;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    public static class JwtBearerExtensions
-    {
-        public static AuthenticationBuilder AddJwtBearer(this AuthenticationBuilder builder)
-            => builder.AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, _ => { });
-
-        public static AuthenticationBuilder AddJwtBearer(this AuthenticationBuilder builder, Action<JwtBearerOptions> configureOptions)
-            => builder.AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, configureOptions);
-
-        public static AuthenticationBuilder AddJwtBearer(this AuthenticationBuilder builder, string authenticationScheme, Action<JwtBearerOptions> configureOptions)
-            => builder.AddJwtBearer(authenticationScheme, displayName: null, configureOptions: configureOptions);
-
-        public static AuthenticationBuilder AddJwtBearer(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<JwtBearerOptions> configureOptions)
-        {
-            builder.Services.TryAddEnumerable(ServiceDescriptor.Singleton<IPostConfigureOptions<JwtBearerOptions>, JwtBearerPostConfigureOptions>());
-            return builder.AddScheme<JwtBearerOptions, JwtBearerHandler>(authenticationScheme, displayName, configureOptions);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerHandler.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerHandler.cs
deleted file mode 100644
index 4f03ccd69..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerHandler.cs
+++ /dev/null
@@ -1,317 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Security.Claims;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Microsoft.IdentityModel.Tokens;
-using Microsoft.Net.Http.Headers;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    public class JwtBearerHandler : AuthenticationHandler<JwtBearerOptions>
-    {
-        private OpenIdConnectConfiguration _configuration;
-
-        public JwtBearerHandler(IOptionsMonitor<JwtBearerOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        { }
-
-        /// <summary>
-        /// The handler calls methods on the events which give the application control at certain points where processing is occurring. 
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        protected new JwtBearerEvents Events
-        {
-            get => (JwtBearerEvents)base.Events;
-            set => base.Events = value;
-        }
-
-        protected override Task<object> CreateEventsAsync() => Task.FromResult<object>(new JwtBearerEvents());
-
-        /// <summary>
-        /// Searches the 'Authorization' header for a 'Bearer' token. If the 'Bearer' token is found, it is validated using <see cref="TokenValidationParameters"/> set in the options.
-        /// </summary>
-        /// <returns></returns>
-        protected override async Task<AuthenticateResult> HandleAuthenticateAsync()
-        {
-            string token = null;
-            try
-            {
-                // Give application opportunity to find from a different location, adjust, or reject token
-                var messageReceivedContext = new MessageReceivedContext(Context, Scheme, Options);
-
-                // event can set the token
-                await Events.MessageReceived(messageReceivedContext);
-                if (messageReceivedContext.Result != null)
-                {
-                    return messageReceivedContext.Result;
-                }
-
-                // If application retrieved token from somewhere else, use that.
-                token = messageReceivedContext.Token;
-
-                if (string.IsNullOrEmpty(token))
-                {
-                    string authorization = Request.Headers["Authorization"];
-
-                    // If no authorization header found, nothing to process further
-                    if (string.IsNullOrEmpty(authorization))
-                    {
-                        return AuthenticateResult.NoResult();
-                    }
-
-                    if (authorization.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase))
-                    {
-                        token = authorization.Substring("Bearer ".Length).Trim();
-                    }
-
-                    // If no token found, no further work possible
-                    if (string.IsNullOrEmpty(token))
-                    {
-                        return AuthenticateResult.NoResult();
-                    }
-                }
-
-                if (_configuration == null && Options.ConfigurationManager != null)
-                {
-                    _configuration = await Options.ConfigurationManager.GetConfigurationAsync(Context.RequestAborted);
-                }
-
-                var validationParameters = Options.TokenValidationParameters.Clone();
-                if (_configuration != null)
-                {
-                    var issuers = new[] { _configuration.Issuer };
-                    validationParameters.ValidIssuers = validationParameters.ValidIssuers?.Concat(issuers) ?? issuers;
-
-                    validationParameters.IssuerSigningKeys = validationParameters.IssuerSigningKeys?.Concat(_configuration.SigningKeys)
-                        ?? _configuration.SigningKeys;
-                }
-
-                List<Exception> validationFailures = null;
-                SecurityToken validatedToken;
-                foreach (var validator in Options.SecurityTokenValidators)
-                {
-                    if (validator.CanReadToken(token))
-                    {
-                        ClaimsPrincipal principal;
-                        try
-                        {
-                            principal = validator.ValidateToken(token, validationParameters, out validatedToken);
-                        }
-                        catch (Exception ex)
-                        {
-                            Logger.TokenValidationFailed(ex);
-
-                            // Refresh the configuration for exceptions that may be caused by key rollovers. The user can also request a refresh in the event.
-                            if (Options.RefreshOnIssuerKeyNotFound && Options.ConfigurationManager != null
-                                && ex is SecurityTokenSignatureKeyNotFoundException)
-                            {
-                                Options.ConfigurationManager.RequestRefresh();
-                            }
-
-                            if (validationFailures == null)
-                            {
-                                validationFailures = new List<Exception>(1);
-                            }
-                            validationFailures.Add(ex);
-                            continue;
-                        }
-
-                        Logger.TokenValidationSucceeded();
-
-                        var tokenValidatedContext = new TokenValidatedContext(Context, Scheme, Options)
-                        {
-                            Principal = principal,
-                            SecurityToken = validatedToken
-                        };
-
-                        await Events.TokenValidated(tokenValidatedContext);
-                        if (tokenValidatedContext.Result != null)
-                        {
-                            return tokenValidatedContext.Result;
-                        }
-
-                        if (Options.SaveToken)
-                        {
-                            tokenValidatedContext.Properties.StoreTokens(new[]
-                            {
-                                new AuthenticationToken { Name = "access_token", Value = token }
-                            });
-                        }
-
-                        tokenValidatedContext.Success();
-                        return tokenValidatedContext.Result;
-                    }
-                }
-
-                if (validationFailures != null)
-                {
-                    var authenticationFailedContext = new AuthenticationFailedContext(Context, Scheme, Options)
-                    {
-                        Exception = (validationFailures.Count == 1) ? validationFailures[0] : new AggregateException(validationFailures)
-                    };
-
-                    await Events.AuthenticationFailed(authenticationFailedContext);
-                    if (authenticationFailedContext.Result != null)
-                    {
-                        return authenticationFailedContext.Result;
-                    }
-
-                    return AuthenticateResult.Fail(authenticationFailedContext.Exception);
-                }
-
-                return AuthenticateResult.Fail("No SecurityTokenValidator available for token: " + token ?? "[null]");
-            }
-            catch (Exception ex)
-            {
-                Logger.ErrorProcessingMessage(ex);
-
-                var authenticationFailedContext = new AuthenticationFailedContext(Context, Scheme, Options)
-                {
-                    Exception = ex
-                };
-
-                await Events.AuthenticationFailed(authenticationFailedContext);
-                if (authenticationFailedContext.Result != null)
-                {
-                    return authenticationFailedContext.Result;
-                }
-
-                throw;
-            }
-        }
-
-        protected override async Task HandleChallengeAsync(AuthenticationProperties properties)
-        {
-            var authResult = await HandleAuthenticateOnceSafeAsync();
-            var eventContext = new JwtBearerChallengeContext(Context, Scheme, Options, properties)
-            {
-                AuthenticateFailure = authResult?.Failure
-            };
-
-            // Avoid returning error=invalid_token if the error is not caused by an authentication failure (e.g missing token).
-            if (Options.IncludeErrorDetails && eventContext.AuthenticateFailure != null)
-            {
-                eventContext.Error = "invalid_token";
-                eventContext.ErrorDescription = CreateErrorDescription(eventContext.AuthenticateFailure);
-            }
-
-            await Events.Challenge(eventContext);
-            if (eventContext.Handled)
-            {
-                return;
-            }
-
-            Response.StatusCode = 401;
-
-            if (string.IsNullOrEmpty(eventContext.Error) &&
-                string.IsNullOrEmpty(eventContext.ErrorDescription) &&
-                string.IsNullOrEmpty(eventContext.ErrorUri))
-            {
-                Response.Headers.Append(HeaderNames.WWWAuthenticate, Options.Challenge);
-            }
-            else
-            {
-                // https://tools.ietf.org/html/rfc6750#section-3.1
-                // WWW-Authenticate: Bearer realm="example", error="invalid_token", error_description="The access token expired"
-                var builder = new StringBuilder(Options.Challenge);
-                if (Options.Challenge.IndexOf(" ", StringComparison.Ordinal) > 0)
-                {
-                    // Only add a comma after the first param, if any
-                    builder.Append(',');
-                }
-                if (!string.IsNullOrEmpty(eventContext.Error))
-                {
-                    builder.Append(" error=\"");
-                    builder.Append(eventContext.Error);
-                    builder.Append("\"");
-                }
-                if (!string.IsNullOrEmpty(eventContext.ErrorDescription))
-                {
-                    if (!string.IsNullOrEmpty(eventContext.Error))
-                    {
-                        builder.Append(",");
-                    }
-
-                    builder.Append(" error_description=\"");
-                    builder.Append(eventContext.ErrorDescription);
-                    builder.Append('\"');
-                }
-                if (!string.IsNullOrEmpty(eventContext.ErrorUri))
-                {
-                    if (!string.IsNullOrEmpty(eventContext.Error) ||
-                        !string.IsNullOrEmpty(eventContext.ErrorDescription))
-                    {
-                        builder.Append(",");
-                    }
-
-                    builder.Append(" error_uri=\"");
-                    builder.Append(eventContext.ErrorUri);
-                    builder.Append('\"');
-                }
-
-                Response.Headers.Append(HeaderNames.WWWAuthenticate, builder.ToString());
-            }
-        }
-
-        private static string CreateErrorDescription(Exception authFailure)
-        {
-            IEnumerable<Exception> exceptions;
-            if (authFailure is AggregateException agEx)
-            {
-                exceptions = agEx.InnerExceptions;
-            }
-            else
-            {
-                exceptions = new[] { authFailure };
-            }
-
-            var messages = new List<string>();
-
-            foreach (var ex in exceptions)
-            {
-                // Order sensitive, some of these exceptions derive from others
-                // and we want to display the most specific message possible.
-                switch (ex)
-                {
-                    case SecurityTokenInvalidAudienceException _:
-                        messages.Add("The audience is invalid");
-                        break;
-                    case SecurityTokenInvalidIssuerException _:
-                        messages.Add("The issuer is invalid");
-                        break;
-                    case SecurityTokenNoExpirationException _:
-                        messages.Add("The token has no expiration");
-                        break;
-                    case SecurityTokenInvalidLifetimeException _:
-                        messages.Add("The token lifetime is invalid");
-                        break;
-                    case SecurityTokenNotYetValidException _:
-                        messages.Add("The token is not valid yet");
-                        break;
-                    case SecurityTokenExpiredException _:
-                        messages.Add("The token is expired");
-                        break;
-                    case SecurityTokenSignatureKeyNotFoundException _:
-                        messages.Add("The signature key was not found");
-                        break;
-                    case SecurityTokenInvalidSignatureException _:
-                        messages.Add("The signature is invalid");
-                        break;
-                }
-            }
-
-            return string.Join("; ", messages);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerOptions.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerOptions.cs
deleted file mode 100644
index 0d0a88e24..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerOptions.cs
+++ /dev/null
@@ -1,114 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.IdentityModel.Tokens.Jwt;
-using System.Net.Http;
-using Microsoft.IdentityModel.Protocols;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Microsoft.IdentityModel.Tokens;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    /// <summary>
-    /// Options class provides information needed to control Bearer Authentication handler behavior
-    /// </summary>
-    public class JwtBearerOptions : AuthenticationSchemeOptions
-    {
-        /// <summary>
-        /// Gets or sets if HTTPS is required for the metadata address or authority.
-        /// The default is true. This should be disabled only in development environments.
-        /// </summary>
-        public bool RequireHttpsMetadata { get; set; } = true;
-
-        /// <summary>
-        /// Gets or sets the discovery endpoint for obtaining metadata
-        /// </summary>
-        public string MetadataAddress { get; set; }
-
-        /// <summary>
-        /// Gets or sets the Authority to use when making OpenIdConnect calls.
-        /// </summary>
-        public string Authority { get; set; }
-
-        /// <summary>
-        /// Gets or sets the audience for any received OpenIdConnect token.
-        /// </summary>
-        /// <value>
-        /// The expected audience for any received OpenIdConnect token.
-        /// </value>
-        public string Audience { get; set; }
-
-        /// <summary>
-        /// Gets or sets the challenge to put in the "WWW-Authenticate" header.
-        /// </summary>
-        public string Challenge { get; set; } = JwtBearerDefaults.AuthenticationScheme;
-
-        /// <summary>
-        /// The object provided by the application to process events raised by the bearer authentication handler.
-        /// The application may implement the interface fully, or it may create an instance of JwtBearerEvents
-        /// and assign delegates only to the events it wants to process.
-        /// </summary>
-        public new JwtBearerEvents Events
-        {
-            get { return (JwtBearerEvents)base.Events; }
-            set { base.Events = value; }
-        }
-
-        /// <summary>
-        /// The HttpMessageHandler used to retrieve metadata.
-        /// This cannot be set at the same time as BackchannelCertificateValidator unless the value
-        /// is a WebRequestHandler.
-        /// </summary>
-        public HttpMessageHandler BackchannelHttpHandler { get; set; }
-
-        /// <summary>
-        /// Gets or sets the timeout when using the backchannel to make an http call.
-        /// </summary>
-        public TimeSpan BackchannelTimeout { get; set; } = TimeSpan.FromMinutes(1);
-
-        /// <summary>
-        /// Configuration provided directly by the developer. If provided, then MetadataAddress and the Backchannel properties
-        /// will not be used. This information should not be updated during request processing.
-        /// </summary>
-        public OpenIdConnectConfiguration Configuration { get; set; }
-
-        /// <summary>
-        /// Responsible for retrieving, caching, and refreshing the configuration from metadata.
-        /// If not provided, then one will be created using the MetadataAddress and Backchannel properties.
-        /// </summary>
-        public IConfigurationManager<OpenIdConnectConfiguration> ConfigurationManager { get; set; }
-
-        /// <summary>
-        /// Gets or sets if a metadata refresh should be attempted after a SecurityTokenSignatureKeyNotFoundException. This allows for automatic
-        /// recovery in the event of a signature key rollover. This is enabled by default.
-        /// </summary>
-        public bool RefreshOnIssuerKeyNotFound { get; set; } = true;
-
-        /// <summary>
-        /// Gets the ordered list of <see cref="ISecurityTokenValidator"/> used to validate access tokens.
-        /// </summary>
-        public IList<ISecurityTokenValidator> SecurityTokenValidators { get; } = new List<ISecurityTokenValidator> { new JwtSecurityTokenHandler() };
-
-        /// <summary>
-        /// Gets or sets the parameters used to validate identity tokens.
-        /// </summary>
-        /// <remarks>Contains the types and definitions required for validating a token.</remarks>
-        /// <exception cref="ArgumentNullException">if 'value' is null.</exception>
-        public TokenValidationParameters TokenValidationParameters { get; set; } = new TokenValidationParameters();
-
-        /// <summary>
-        /// Defines whether the bearer token should be stored in the
-        /// <see cref="Http.Authentication.AuthenticationProperties"/> after a successful authorization.
-        /// </summary>
-        public bool SaveToken { get; set; } = true;
-
-        /// <summary>
-        /// Defines whether the token validation errors should be returned to the caller.
-        /// Enabled by default, this option can be disabled to prevent the JWT handler
-        /// from returning an error and an error_description in the WWW-Authenticate header.
-        /// </summary>
-        public bool IncludeErrorDetails { get; set; } = true;
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerPostConfigureOptions.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerPostConfigureOptions.cs
deleted file mode 100644
index 8829bfac0..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerPostConfigureOptions.cs
+++ /dev/null
@@ -1,63 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Net.Http;
-using Microsoft.Extensions.Options;
-using Microsoft.IdentityModel.Protocols;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    /// <summary>
-    /// Used to setup defaults for all <see cref="JwtBearerOptions"/>.
-    /// </summary>
-    public class JwtBearerPostConfigureOptions : IPostConfigureOptions<JwtBearerOptions>
-    {
-        /// <summary>
-        /// Invoked to post configure a JwtBearerOptions instance.
-        /// </summary>
-        /// <param name="name">The name of the options instance being configured.</param>
-        /// <param name="options">The options instance to configure.</param>
-        public void PostConfigure(string name, JwtBearerOptions options)
-        {
-            if (string.IsNullOrEmpty(options.TokenValidationParameters.ValidAudience) && !string.IsNullOrEmpty(options.Audience))
-            {
-                options.TokenValidationParameters.ValidAudience = options.Audience;
-            }
-
-            if (options.ConfigurationManager == null)
-            {
-                if (options.Configuration != null)
-                {
-                    options.ConfigurationManager = new StaticConfigurationManager<OpenIdConnectConfiguration>(options.Configuration);
-                }
-                else if (!(string.IsNullOrEmpty(options.MetadataAddress) && string.IsNullOrEmpty(options.Authority)))
-                {
-                    if (string.IsNullOrEmpty(options.MetadataAddress) && !string.IsNullOrEmpty(options.Authority))
-                    {
-                        options.MetadataAddress = options.Authority;
-                        if (!options.MetadataAddress.EndsWith("/", StringComparison.Ordinal))
-                        {
-                            options.MetadataAddress += "/";
-                        }
-
-                        options.MetadataAddress += ".well-known/openid-configuration";
-                    }
-
-                    if (options.RequireHttpsMetadata && !options.MetadataAddress.StartsWith("https://", StringComparison.OrdinalIgnoreCase))
-                    {
-                        throw new InvalidOperationException("The MetadataAddress or Authority must use HTTPS unless disabled for development by setting RequireHttpsMetadata=false.");
-                    }
-
-                    var httpClient = new HttpClient(options.BackchannelHttpHandler ?? new HttpClientHandler());
-                    httpClient.Timeout = options.BackchannelTimeout;
-                    httpClient.MaxResponseContentBufferSize = 1024 * 1024 * 10; // 10 MB
-
-                    options.ConfigurationManager = new ConfigurationManager<OpenIdConnectConfiguration>(options.MetadataAddress, new OpenIdConnectConfigurationRetriever(),
-                        new HttpDocumentRetriever(httpClient) { RequireHttps = options.RequireHttpsMetadata });
-                }
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/LoggingExtensions.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/LoggingExtensions.cs
deleted file mode 100644
index 5c6ca088a..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/LoggingExtensions.cs
+++ /dev/null
@@ -1,39 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.Extensions.Logging
-{
-    internal static class LoggingExtensions
-    {
-        private static Action<ILogger, Exception> _tokenValidationFailed;
-        private static Action<ILogger, Exception> _tokenValidationSucceeded;
-        private static Action<ILogger, Exception> _errorProcessingMessage;
-
-        static LoggingExtensions()
-        {
-            _tokenValidationFailed = LoggerMessage.Define(
-                eventId: 1,
-                logLevel: LogLevel.Information,
-                formatString: "Failed to validate the token.");
-            _tokenValidationSucceeded = LoggerMessage.Define(
-                eventId: 2,
-                logLevel: LogLevel.Information,
-                formatString: "Successfully validated the token.");
-            _errorProcessingMessage = LoggerMessage.Define(
-                eventId: 3,
-                logLevel: LogLevel.Error,
-                formatString: "Exception occurred while processing message.");
-        }
-
-        public static void TokenValidationFailed(this ILogger logger, Exception ex)
-            => _tokenValidationFailed(logger, ex);
-
-        public static void TokenValidationSucceeded(this ILogger logger)
-            => _tokenValidationSucceeded(logger, null);
-
-        public static void ErrorProcessingMessage(this ILogger logger, Exception ex)
-            => _errorProcessingMessage(logger, ex);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Microsoft.AspNetCore.Authentication.JwtBearer.csproj b/src/Microsoft.AspNetCore.Authentication.JwtBearer/Microsoft.AspNetCore.Authentication.JwtBearer.csproj
deleted file mode 100644
index 8a26c58f3..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Microsoft.AspNetCore.Authentication.JwtBearer.csproj
+++ /dev/null
@@ -1,19 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication\Microsoft.AspNetCore.Authentication.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="$(MicrosoftIdentityModelProtocolsOpenIdConnectPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication.JwtBearer/Properties/Resources.Designer.cs
deleted file mode 100644
index e95b8e061..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,58 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.JwtBearer.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string Exception_OptionMustBeProvided
-        {
-            get => GetString("Exception_OptionMustBeProvided");
-        }
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string FormatException_OptionMustBeProvided(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_OptionMustBeProvided"), p0);
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string Exception_ValidatorHandlerMismatch
-        {
-            get => GetString("Exception_ValidatorHandlerMismatch");
-        }
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string FormatException_ValidatorHandlerMismatch()
-            => GetString("Exception_ValidatorHandlerMismatch");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Resources.resx b/src/Microsoft.AspNetCore.Authentication.JwtBearer/Resources.resx
deleted file mode 100644
index 2a19bea96..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/Resources.resx
+++ /dev/null
@@ -1,126 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_OptionMustBeProvided" xml:space="preserve">
-    <value>The '{0}' option must be provided.</value>
-  </data>
-  <data name="Exception_ValidatorHandlerMismatch" xml:space="preserve">
-    <value>An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.JwtBearer/baseline.netcore.json
deleted file mode 100644
index d3839022b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/baseline.netcore.json
+++ /dev/null
@@ -1,1064 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.JwtBearer, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.JwtBearerExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddJwtBearer",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddJwtBearer",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddJwtBearer",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddJwtBearer",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.JwtBearerAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseJwtBearerAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseJwtBearerAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.AuthenticationFailedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.ResultContext<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Exception",
-          "Parameters": [],
-          "ReturnType": "System.Exception",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Exception",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerChallengeContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.PropertiesContext<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_AuthenticateFailure",
-          "Parameters": [],
-          "ReturnType": "System.Exception",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AuthenticateFailure",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Error",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Error",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ErrorDescription",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ErrorDescription",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ErrorUri",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ErrorUri",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Handled",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleResponse",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerEvents",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_OnAuthenticationFailed",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.JwtBearer.AuthenticationFailedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnAuthenticationFailed",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.JwtBearer.AuthenticationFailedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnMessageReceived",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.JwtBearer.MessageReceivedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnMessageReceived",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.JwtBearer.MessageReceivedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnTokenValidated",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.JwtBearer.TokenValidatedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnTokenValidated",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.JwtBearer.TokenValidatedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnChallenge",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerChallengeContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnChallenge",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerChallengeContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthenticationFailed",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.AuthenticationFailedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MessageReceived",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.MessageReceivedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "TokenValidated",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.TokenValidatedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Challenge",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerChallengeContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.MessageReceivedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.ResultContext<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Token",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Token",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.TokenValidatedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.ResultContext<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_SecurityToken",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Tokens.SecurityToken",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SecurityToken",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Tokens.SecurityToken"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"Bearer\""
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticationHandler<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerEvents",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Object>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "dataProtection",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_RequireHttpsMetadata",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RequireHttpsMetadata",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_MetadataAddress",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_MetadataAddress",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Authority",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Authority",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Audience",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Audience",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Challenge",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Challenge",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerEvents",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_BackchannelHttpHandler",
-          "Parameters": [],
-          "ReturnType": "System.Net.Http.HttpMessageHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_BackchannelHttpHandler",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Net.Http.HttpMessageHandler"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_BackchannelTimeout",
-          "Parameters": [],
-          "ReturnType": "System.TimeSpan",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_BackchannelTimeout",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.TimeSpan"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Configuration",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Configuration",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ConfigurationManager",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.IConfigurationManager<Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ConfigurationManager",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.IConfigurationManager<Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RefreshOnIssuerKeyNotFound",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RefreshOnIssuerKeyNotFound",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SecurityTokenValidators",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IList<Microsoft.IdentityModel.Tokens.ISecurityTokenValidator>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenValidationParameters",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Tokens.TokenValidationParameters",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenValidationParameters",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Tokens.TokenValidationParameters"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SaveToken",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SaveToken",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_IncludeErrorDetails",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_IncludeErrorDetails",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerPostConfigureOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "PostConfigure",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.JwtBearer/breakingchanges.netcore.json b/src/Microsoft.AspNetCore.Authentication.JwtBearer/breakingchanges.netcore.json
deleted file mode 100644
index d17003a80..000000000
--- a/src/Microsoft.AspNetCore.Authentication.JwtBearer/breakingchanges.netcore.json
+++ /dev/null
@@ -1,7 +0,0 @@
-  [
-    {
-      "TypeId": "public class Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler : Microsoft.AspNetCore.Authentication.AuthenticationHandler<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions>",
-      "MemberId": "public .ctor(Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions> options, Microsoft.Extensions.Logging.ILoggerFactory logger, System.Text.Encodings.Web.UrlEncoder encoder, Microsoft.AspNetCore.DataProtection.IDataProtectionProvider dataProtection, Microsoft.AspNetCore.Authentication.ISystemClock clock)",
-      "Kind": "Removal"
-    }
-  ]
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Microsoft.AspNetCore.Authentication.MicrosoftAccount.csproj b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Microsoft.AspNetCore.Authentication.MicrosoftAccount.csproj
deleted file mode 100644
index 1841157c9..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Microsoft.AspNetCore.Authentication.MicrosoftAccount.csproj
+++ /dev/null
@@ -1,15 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core middleware that enables an application to support the Microsoft Account authentication workflow.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication.OAuth\Microsoft.AspNetCore.Authentication.OAuth.csproj" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountAppBuilderExtensions.cs
deleted file mode 100644
index 7fd71d7a9..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountAppBuilderExtensions.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.MicrosoftAccount;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add Microsoft Account authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class MicrosoftAccountAppBuilderExtensions
-    {
-        /// <summary>
-        /// UseMicrosoftAccountAuthentication is obsolete. Configure MicrosoftAccount authentication with AddAuthentication().AddMicrosoftAccount in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseMicrosoftAccountAuthentication is obsolete. Configure MicrosoftAccount authentication with AddAuthentication().AddMicrosoftAccount in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseMicrosoftAccountAuthentication(this IApplicationBuilder app)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-
-        /// <summary>
-        /// UseMicrosoftAccountAuthentication is obsolete. Configure MicrosoftAccount authentication with AddAuthentication().AddMicrosoftAccount in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">A <see cref="MicrosoftAccountOptions"/> that specifies options for the handler.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseMicrosoftAccountAuthentication is obsolete. Configure MicrosoftAccount authentication with AddAuthentication().AddMicrosoftAccount in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseMicrosoftAccountAuthentication(this IApplicationBuilder app, MicrosoftAccountOptions options)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountDefaults.cs b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountDefaults.cs
deleted file mode 100644
index 0421fa14b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountDefaults.cs
+++ /dev/null
@@ -1,19 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.MicrosoftAccount
-{
-    public static class MicrosoftAccountDefaults
-    {
-        public const string AuthenticationScheme = "Microsoft";
-
-        public static readonly string DisplayName = "Microsoft";
-
-        // https://developer.microsoft.com/en-us/graph/docs/concepts/auth_v2_user
-        public static readonly string AuthorizationEndpoint = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize";
-
-        public static readonly string TokenEndpoint = "https://login.microsoftonline.com/common/oauth2/v2.0/token";
-
-        public static readonly string UserInformationEndpoint = "https://graph.microsoft.com/v1.0/me";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountExtensions.cs b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountExtensions.cs
deleted file mode 100644
index 7f24e5af7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountExtensions.cs
+++ /dev/null
@@ -1,24 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.MicrosoftAccount;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    public static class MicrosoftAccountExtensions
-    {
-        public static AuthenticationBuilder AddMicrosoftAccount(this AuthenticationBuilder builder)
-            => builder.AddMicrosoftAccount(MicrosoftAccountDefaults.AuthenticationScheme, _ => { });
-
-        public static AuthenticationBuilder AddMicrosoftAccount(this AuthenticationBuilder builder, Action<MicrosoftAccountOptions> configureOptions)
-            => builder.AddMicrosoftAccount(MicrosoftAccountDefaults.AuthenticationScheme, configureOptions);
-
-        public static AuthenticationBuilder AddMicrosoftAccount(this AuthenticationBuilder builder, string authenticationScheme, Action<MicrosoftAccountOptions> configureOptions)
-            => builder.AddMicrosoftAccount(authenticationScheme, MicrosoftAccountDefaults.DisplayName, configureOptions);
-
-        public static AuthenticationBuilder AddMicrosoftAccount(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<MicrosoftAccountOptions> configureOptions)
-            => builder.AddOAuth<MicrosoftAccountOptions, MicrosoftAccountHandler>(authenticationScheme, displayName, configureOptions);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountHandler.cs b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountHandler.cs
deleted file mode 100644
index bba547277..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountHandler.cs
+++ /dev/null
@@ -1,42 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Net.Http;
-using System.Net.Http.Headers;
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.MicrosoftAccount
-{
-    public class MicrosoftAccountHandler : OAuthHandler<MicrosoftAccountOptions>
-    {
-        public MicrosoftAccountHandler(IOptionsMonitor<MicrosoftAccountOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        { }
-
-        protected override async Task<AuthenticationTicket> CreateTicketAsync(ClaimsIdentity identity, AuthenticationProperties properties, OAuthTokenResponse tokens)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, Options.UserInformationEndpoint);
-            request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", tokens.AccessToken);
-
-            var response = await Backchannel.SendAsync(request, Context.RequestAborted);
-            if (!response.IsSuccessStatusCode)
-            {
-                throw new HttpRequestException($"An error occurred when retrieving Microsoft user information ({response.StatusCode}). Please check if the authentication information is correct and the corresponding Microsoft Account API is enabled.");
-            }
-
-            var payload = JObject.Parse(await response.Content.ReadAsStringAsync());
-
-            var context = new OAuthCreatingTicketContext(new ClaimsPrincipal(identity), properties, Context, Scheme, Options, Backchannel, tokens, payload);
-            context.RunClaimActions();
-
-            await Events.CreatingTicket(context);
-            return new AuthenticationTicket(context.Principal, context.Properties, Scheme.Name);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountOptions.cs b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountOptions.cs
deleted file mode 100644
index dbca3507e..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/MicrosoftAccountOptions.cs
+++ /dev/null
@@ -1,35 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.MicrosoftAccount;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Authentication.OAuth;
-
-namespace Microsoft.AspNetCore.Authentication.MicrosoftAccount
-{
-    /// <summary>
-    /// Configuration options for <see cref="MicrosoftAccountHandler"/>.
-    /// </summary>
-    public class MicrosoftAccountOptions : OAuthOptions
-    {
-        /// <summary>
-        /// Initializes a new <see cref="MicrosoftAccountOptions"/>.
-        /// </summary>
-        public MicrosoftAccountOptions()
-        {
-            CallbackPath = new PathString("/signin-microsoft");
-            AuthorizationEndpoint = MicrosoftAccountDefaults.AuthorizationEndpoint;
-            TokenEndpoint = MicrosoftAccountDefaults.TokenEndpoint;
-            UserInformationEndpoint = MicrosoftAccountDefaults.UserInformationEndpoint;
-            Scope.Add("https://graph.microsoft.com/user.read");
-
-            ClaimActions.MapJsonKey(ClaimTypes.NameIdentifier, "id");
-            ClaimActions.MapJsonKey(ClaimTypes.Name, "displayName");
-            ClaimActions.MapJsonKey(ClaimTypes.GivenName, "givenName");
-            ClaimActions.MapJsonKey(ClaimTypes.Surname, "surname");
-            ClaimActions.MapCustomJson(ClaimTypes.Email, user => user.Value<string>("mail") ?? user.Value<string>("userPrincipalName"));
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Properties/Resources.Designer.cs
deleted file mode 100644
index 7ef5acecb..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,72 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication.MicrosoftAccount
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.MicrosoftAccount.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// The user does not have an id.
-        /// </summary>
-        internal static string Exception_MissingId
-        {
-            get => GetString("Exception_MissingId");
-        }
-
-        /// <summary>
-        /// The user does not have an id.
-        /// </summary>
-        internal static string FormatException_MissingId()
-            => GetString("Exception_MissingId");
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string Exception_OptionMustBeProvided
-        {
-            get => GetString("Exception_OptionMustBeProvided");
-        }
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string FormatException_OptionMustBeProvided(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_OptionMustBeProvided"), p0);
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string Exception_ValidatorHandlerMismatch
-        {
-            get => GetString("Exception_ValidatorHandlerMismatch");
-        }
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string FormatException_ValidatorHandlerMismatch()
-            => GetString("Exception_ValidatorHandlerMismatch");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Resources.resx b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Resources.resx
deleted file mode 100644
index 26eb43888..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/Resources.resx
+++ /dev/null
@@ -1,129 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_MissingId" xml:space="preserve">
-    <value>The user does not have an id.</value>
-  </data>
-  <data name="Exception_OptionMustBeProvided" xml:space="preserve">
-    <value>The '{0}' option must be provided.</value>
-  </data>
-  <data name="Exception_ValidatorHandlerMismatch" xml:space="preserve">
-    <value>An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/baseline.netcore.json
deleted file mode 100644
index 877e9035a..000000000
--- a/src/Microsoft.AspNetCore.Authentication.MicrosoftAccount/baseline.netcore.json
+++ /dev/null
@@ -1,284 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.MicrosoftAccount, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.MicrosoftAccountExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddMicrosoftAccount",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddMicrosoftAccount",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddMicrosoftAccount",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddMicrosoftAccount",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "DisplayName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthorizationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "TokenEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "UserInformationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"Microsoft\""
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthHandler<Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "CreateTicketAsync",
-          "Parameters": [
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "tokens",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.MicrosoftAccountAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseMicrosoftAccountAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseMicrosoftAccountAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.MicrosoftAccount.MicrosoftAccountOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimAction.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimAction.cs
deleted file mode 100644
index 78b63bb38..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimAction.cs
+++ /dev/null
@@ -1,42 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth.Claims
-{
-    /// <summary>
-    /// Infrastructure for mapping user data from a json structure to claims on the ClaimsIdentity.
-    /// </summary>
-    public abstract class ClaimAction
-    {
-        /// <summary>
-        /// Create a new claim manipulation action.
-        /// </summary>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        public ClaimAction(string claimType, string valueType)
-        {
-            ClaimType = claimType;
-            ValueType = valueType;
-        }
-
-        /// <summary>
-        /// The value to use for Claim.Type when creating a Claim.
-        /// </summary>
-        public string ClaimType { get; }
-
-        // The value to use for Claim.ValueType when creating a Claim.
-        public string ValueType { get; }
-
-        /// <summary>
-        /// Examine the given userData json, determine if the requisite data is present, and optionally add it
-        /// as a new Claim on the ClaimsIdentity.
-        /// </summary>
-        /// <param name="userData">The source data to examine. This value may be null.</param>
-        /// <param name="identity">The identity to add Claims to.</param>
-        /// <param name="issuer">The value to use for Claim.Issuer when creating a Claim.</param>
-        public abstract void Run(JObject userData, ClaimsIdentity identity, string issuer);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimActionCollection.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimActionCollection.cs
deleted file mode 100644
index 63da155d7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimActionCollection.cs
+++ /dev/null
@@ -1,52 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections;
-using System.Collections.Generic;
-using System.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth.Claims
-{
-    /// <summary>
-    /// A collection of ClaimActions used when mapping user data to Claims.
-    /// </summary>
-    public class ClaimActionCollection : IEnumerable<ClaimAction>
-    {
-        private IList<ClaimAction> Actions { get; } = new List<ClaimAction>();
-
-        /// <summary>
-        /// Remove all claim actions.
-        /// </summary>
-        public void Clear() => Actions.Clear();
-
-        /// <summary>
-        /// Remove all claim actions for the given ClaimType.
-        /// </summary>
-        /// <param name="claimType">The ClaimType of maps to remove.</param>
-        public void Remove(string claimType)
-        {
-            var itemsToRemove = Actions.Where(map => string.Equals(claimType, map.ClaimType, StringComparison.OrdinalIgnoreCase)).ToList();
-            itemsToRemove.ForEach(map => Actions.Remove(map));
-        }
-
-        /// <summary>
-        /// Add a claim action to the collection.
-        /// </summary>
-        /// <param name="action">The claim action to add.</param>
-        public void Add(ClaimAction action)
-        {
-            Actions.Add(action);
-        }
-
-        public IEnumerator<ClaimAction> GetEnumerator()
-        {
-            return Actions.GetEnumerator();
-        }
-
-        IEnumerator IEnumerable.GetEnumerator()
-        {
-            return Actions.GetEnumerator();
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimActionCollectionMapExtensions.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimActionCollectionMapExtensions.cs
deleted file mode 100644
index 5a178957a..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/ClaimActionCollectionMapExtensions.cs
+++ /dev/null
@@ -1,139 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication.OAuth.Claims;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public static class ClaimActionCollectionMapExtensions
-    {
-        /// <summary>
-        /// Select a top level value from the json user data with the given key name and add it as a Claim.
-        /// This no-ops if the key is not found or the value is empty.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        public static void MapJsonKey(this ClaimActionCollection collection, string claimType, string jsonKey)
-        {
-            collection.MapJsonKey(claimType, jsonKey, ClaimValueTypes.String);
-        }
-
-        /// <summary>
-        /// Select a top level value from the json user data with the given key name and add it as a Claim.
-        /// This no-ops if the key is not found or the value is empty.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        public static void MapJsonKey(this ClaimActionCollection collection, string claimType, string jsonKey, string valueType)
-        {
-            collection.Add(new JsonKeyClaimAction(claimType, valueType, jsonKey));
-        }
-
-        /// <summary>
-        /// Select a second level value from the json user data with the given top level key name and second level sub key name and add it as a Claim.
-        /// This no-ops if the keys are not found or the value is empty.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        /// <param name="subKey">The second level key to look for in the json user data.</param>
-        public static void MapJsonSubKey(this ClaimActionCollection collection, string claimType, string jsonKey, string subKey)
-        {
-            collection.MapJsonSubKey(claimType, jsonKey, subKey, ClaimValueTypes.String);
-        }
-
-        /// <summary>
-        /// Select a second level value from the json user data with the given top level key name and second level sub key name and add it as a Claim.
-        /// This no-ops if the keys are not found or the value is empty.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        /// <param name="subKey">The second level key to look for in the json user data.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        public static void MapJsonSubKey(this ClaimActionCollection collection, string claimType, string jsonKey, string subKey, string valueType)
-        {
-            collection.Add(new JsonSubKeyClaimAction(claimType, valueType, jsonKey, subKey));
-        }
-
-        /// <summary>
-        /// Run the given resolver to select a value from the json user data to add as a claim.
-        /// This no-ops if the returned value is empty.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="resolver">The Func that will be called to select value from the given json user data.</param>
-        public static void MapCustomJson(this ClaimActionCollection collection, string claimType, Func<JObject, string> resolver)
-        {
-            collection.MapCustomJson(claimType, ClaimValueTypes.String, resolver);
-        }
-
-        /// <summary>
-        /// Run the given resolver to select a value from the json user data to add as a claim.
-        /// This no-ops if the returned value is empty.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        /// <param name="resolver">The Func that will be called to select value from the given json user data.</param>
-        public static void MapCustomJson(this ClaimActionCollection collection, string claimType, string valueType, Func<JObject, string> resolver)
-        {
-            collection.Add(new CustomJsonClaimAction(claimType, valueType, resolver));
-        }
-
-        /// <summary>
-        /// Clears any current ClaimsActions and maps all values from the json user data as claims, excluding duplicates.
-        /// </summary>
-        /// <param name="collection"></param>
-        public static void MapAll(this ClaimActionCollection collection)
-        {
-            collection.Clear();
-            collection.Add(new MapAllClaimsAction());
-        }
-
-        /// <summary>
-        /// Clears any current ClaimsActions and maps all values from the json user data as claims, excluding the specified types.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="exclusions"></param>
-        public static void MapAllExcept(this ClaimActionCollection collection, params string[] exclusions)
-        {
-            collection.MapAll();
-            collection.DeleteClaims(exclusions);
-        }
-
-        /// <summary>
-        /// Delete all claims from the given ClaimsIdentity with the given ClaimType.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType"></param>
-        public static void DeleteClaim(this ClaimActionCollection collection, string claimType)
-        {
-            collection.Add(new DeleteClaimAction(claimType));
-        }
-
-        /// <summary>
-        /// Delete all claims from the ClaimsIdentity with the given claimTypes.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimTypes"></param>
-        public static void DeleteClaims(this ClaimActionCollection collection, params string[] claimTypes)
-        {
-            if (claimTypes == null)
-            {
-                throw new ArgumentNullException(nameof(claimTypes));
-            }
-
-            foreach (var claimType in claimTypes)
-            {
-                collection.Add(new DeleteClaimAction(claimType));
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/CustomJsonClaimAction.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/CustomJsonClaimAction.cs
deleted file mode 100644
index 21a4f70e1..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/CustomJsonClaimAction.cs
+++ /dev/null
@@ -1,46 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth.Claims
-{
-    /// <summary>
-    /// A ClaimAction that selects the value from the json user data by running the given Func resolver.
-    /// </summary>
-    public class CustomJsonClaimAction : ClaimAction
-    {
-        /// <summary>
-        /// Creates a new CustomJsonClaimAction.
-        /// </summary>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        /// <param name="resolver">The Func that will be called to select value from the given json user data.</param>
-        public CustomJsonClaimAction(string claimType, string valueType, Func<JObject, string> resolver)
-            : base(claimType, valueType)
-        {
-            Resolver = resolver;
-        }
-
-        /// <summary>
-        /// The Func that will be called to select value from the given json user data.
-        /// </summary>
-        public Func<JObject, string> Resolver { get; }
-
-        /// <inheritdoc />
-        public override void Run(JObject userData, ClaimsIdentity identity, string issuer)
-        {
-            if (userData == null)
-            {
-                return;
-            }
-            var value = Resolver(userData);
-            if (!string.IsNullOrEmpty(value))
-            {
-                identity.AddClaim(new Claim(ClaimType, value, ValueType, issuer));
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/DeleteClaimAction.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/DeleteClaimAction.cs
deleted file mode 100644
index 75167cabc..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/DeleteClaimAction.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Linq;
-using System.Security.Claims;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth.Claims
-{
-    /// <summary>
-    /// A ClaimAction that deletes all claims from the given ClaimsIdentity with the given ClaimType.
-    /// </summary>
-    public class DeleteClaimAction : ClaimAction
-    {
-        /// <summary>
-        /// Creates a new DeleteClaimAction.
-        /// </summary>
-        /// <param name="claimType">The ClaimType of Claims to delete.</param>
-        public DeleteClaimAction(string claimType)
-            : base(claimType, ClaimValueTypes.String)
-        {
-        }
-
-        /// <inheritdoc />
-        public override void Run(JObject userData, ClaimsIdentity identity, string issuer)
-        {
-            foreach (var claim in identity.FindAll(ClaimType).ToList())
-            {
-                identity.TryRemoveClaim(claim);
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/JsonKeyClaimAction.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/JsonKeyClaimAction.cs
deleted file mode 100644
index ccd1a965d..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/JsonKeyClaimAction.cs
+++ /dev/null
@@ -1,57 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth.Claims
-{
-    /// <summary>
-    /// A ClaimAction that selects a top level value from the json user data with the given key name and adds it as a Claim.
-    /// This no-ops if the key is not found or the value is empty.
-    /// </summary>
-    public class JsonKeyClaimAction : ClaimAction
-    {
-        /// <summary>
-        /// Creates a new JsonKeyClaimAction.
-        /// </summary>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        public JsonKeyClaimAction(string claimType, string valueType, string jsonKey)
-            : base(claimType, valueType)
-        {
-            JsonKey = jsonKey;
-        }
-
-        /// <summary>
-        /// The top level key to look for in the json user data.
-        /// </summary>
-        public string JsonKey { get; }
-
-        /// <inheritdoc />
-        public override void Run(JObject userData, ClaimsIdentity identity, string issuer)
-        {
-            var value = userData?[JsonKey];
-            if (value is JValue)
-            {
-                AddClaim(value?.ToString(), identity, issuer);
-            }
-            else if (value is JArray)
-            {
-                foreach (var v in value)
-                {
-                    AddClaim(v?.ToString(), identity, issuer);
-                }
-            }
-        }
-
-        private void AddClaim(string value, ClaimsIdentity identity, string issuer)
-        {
-            if (!string.IsNullOrEmpty(value))
-            {
-                identity.AddClaim(new Claim(ClaimType, value, ValueType, issuer));
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/JsonSubKeyClaimAction.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/JsonSubKeyClaimAction.cs
deleted file mode 100644
index bc29672d0..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/JsonSubKeyClaimAction.cs
+++ /dev/null
@@ -1,58 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Newtonsoft.Json.Linq;
-using System.Security.Claims;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth.Claims
-{
-    /// <summary>
-    /// A ClaimAction that selects a second level value from the json user data with the given top level key
-    /// name and second level sub key name and add it as a Claim.
-    /// This no-ops if the keys are not found or the value is empty.
-    /// </summary>
-    public class JsonSubKeyClaimAction : JsonKeyClaimAction
-    {
-        /// <summary>
-        /// Creates a new JsonSubKeyClaimAction.
-        /// </summary>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        /// <param name="subKey">The second level key to look for in the json user data.</param>
-        public JsonSubKeyClaimAction(string claimType, string valueType, string jsonKey, string subKey)
-            : base(claimType, valueType, jsonKey)
-        {
-            SubKey = subKey;
-        }
-
-        /// <summary>
-        /// The second level key to look for in the json user data.
-        /// </summary>
-        public string SubKey { get; }
-
-        /// <inheritdoc />
-        public override void Run(JObject userData, ClaimsIdentity identity, string issuer)
-        {
-            var value = GetValue(userData, JsonKey, SubKey);
-            if (!string.IsNullOrEmpty(value))
-            {
-                identity.AddClaim(new Claim(ClaimType, value, ValueType, issuer));
-            }
-        }
-
-        // Get the given subProperty from a property.
-        private static string GetValue(JObject userData, string propertyName, string subProperty)
-        {
-            if (userData != null && userData.TryGetValue(propertyName, out var value))
-            {
-                var subObject = JObject.Parse(value.ToString());
-                if (subObject != null && subObject.TryGetValue(subProperty, out value))
-                {
-                    return value.ToString();
-                }
-            }
-            return null;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/MapAllClaimsAction.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/MapAllClaimsAction.cs
deleted file mode 100644
index b3bf5d99f..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Claims/MapAllClaimsAction.cs
+++ /dev/null
@@ -1,42 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth.Claims
-{
-    /// <summary>
-    /// A ClaimAction that selects all top level values from the json user data and adds them as Claims.
-    /// This excludes duplicate sets of names and values.
-    /// </summary>
-    public class MapAllClaimsAction : ClaimAction
-    {
-        public MapAllClaimsAction() : base("All", ClaimValueTypes.String)
-        {
-        }
-
-        public override void Run(JObject userData, ClaimsIdentity identity, string issuer)
-        {
-            if (userData == null)
-            {
-                return;
-            }
-            foreach (var pair in userData)
-            {
-                var claimValue = userData.TryGetValue(pair.Key, out var value) ? value.ToString() : null;
-
-                // Avoid adding a claim if there's a duplicate name and value. This often happens in OIDC when claims are
-                // retrieved both from the id_token and from the user-info endpoint.
-                var duplicate = identity.FindFirst(c => string.Equals(c.Type, pair.Key, StringComparison.OrdinalIgnoreCase)
-                        && string.Equals(c.Value, claimValue, StringComparison.Ordinal)) != null;
-
-                if (!duplicate)
-                {
-                    identity.AddClaim(new Claim(pair.Key, claimValue, ClaimValueTypes.String, issuer));
-                }
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Events/OAuthCreatingTicketContext.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Events/OAuthCreatingTicketContext.cs
deleted file mode 100644
index f660dd224..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Events/OAuthCreatingTicketContext.cs
+++ /dev/null
@@ -1,152 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Globalization;
-using System.Net.Http;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    /// <summary>
-    /// Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.
-    /// </summary>
-    public class OAuthCreatingTicketContext : ResultContext<OAuthOptions>
-    {
-        /// <summary>
-        /// Initializes a new <see cref="OAuthCreatingTicketContext"/>.
-        /// </summary>
-        /// <param name="principal">The <see cref="ClaimsPrincipal"/>.</param>
-        /// <param name="properties">The <see cref="AuthenticationProperties"/>.</param>
-        /// <param name="context">The HTTP environment.</param>
-        /// <param name="scheme">The authentication scheme.</param>
-        /// <param name="options">The options used by the authentication middleware.</param>
-        /// <param name="backchannel">The HTTP client used by the authentication middleware</param>
-        /// <param name="tokens">The tokens returned from the token endpoint.</param>
-        public OAuthCreatingTicketContext(
-            ClaimsPrincipal principal,
-            AuthenticationProperties properties,
-            HttpContext context,
-            AuthenticationScheme scheme,
-            OAuthOptions options,
-            HttpClient backchannel,
-            OAuthTokenResponse tokens)
-            : this(principal, properties, context, scheme, options, backchannel, tokens, user: new JObject())
-        { }
-
-        /// <summary>
-        /// Initializes a new <see cref="OAuthCreatingTicketContext"/>.
-        /// </summary>
-        /// <param name="principal">The <see cref="ClaimsPrincipal"/>.</param>
-        /// <param name="properties">The <see cref="AuthenticationProperties"/>.</param>
-        /// <param name="context">The HTTP environment.</param>
-        /// <param name="scheme">The authentication scheme.</param>
-        /// <param name="options">The options used by the authentication middleware.</param>
-        /// <param name="backchannel">The HTTP client used by the authentication middleware</param>
-        /// <param name="tokens">The tokens returned from the token endpoint.</param>
-        /// <param name="user">The JSON-serialized user.</param>
-        public OAuthCreatingTicketContext(
-            ClaimsPrincipal principal,
-            AuthenticationProperties properties,
-            HttpContext context,
-            AuthenticationScheme scheme,
-            OAuthOptions options,
-            HttpClient backchannel,
-            OAuthTokenResponse tokens,
-            JObject user)
-            : base(context, scheme, options)
-        {
-            if (backchannel == null)
-            {
-                throw new ArgumentNullException(nameof(backchannel));
-            }
-
-            if (tokens == null)
-            {
-                throw new ArgumentNullException(nameof(tokens));
-            }
-
-            if (user == null)
-            {
-                throw new ArgumentNullException(nameof(user));
-            }
-
-            TokenResponse = tokens;
-            Backchannel = backchannel;
-            User = user;
-            Principal = principal;
-            Properties = properties;
-        }
-
-        /// <summary>
-        /// Gets the JSON-serialized user or an empty
-        /// <see cref="JObject"/> if it is not available.
-        /// </summary>
-        public JObject User { get; }
-
-        /// <summary>
-        /// Gets the token response returned by the authentication service.
-        /// </summary>
-        public OAuthTokenResponse TokenResponse { get; }
-
-        /// <summary>
-        /// Gets the access token provided by the authentication service.
-        /// </summary>
-        public string AccessToken => TokenResponse.AccessToken;
-
-        /// <summary>
-        /// Gets the access token type provided by the authentication service.
-        /// </summary>
-        public string TokenType => TokenResponse.TokenType;
-
-        /// <summary>
-        /// Gets the refresh token provided by the authentication service.
-        /// </summary>
-        public string RefreshToken => TokenResponse.RefreshToken;
-
-        /// <summary>
-        /// Gets the access token expiration time.
-        /// </summary>
-        public TimeSpan? ExpiresIn
-        {
-            get
-            {
-                int value;
-                if (int.TryParse(TokenResponse.ExpiresIn, NumberStyles.Integer, CultureInfo.InvariantCulture, out value))
-                {
-                    return TimeSpan.FromSeconds(value);
-                }
-
-                return null;
-            }
-        }
-
-        /// <summary>
-        /// Gets the backchannel used to communicate with the provider.
-        /// </summary>
-        public HttpClient Backchannel { get; }
-
-        /// <summary>
-        /// Gets the main identity exposed by the authentication ticket.
-        /// This property returns <c>null</c> when the ticket is <c>null</c>.
-        /// </summary>
-        public ClaimsIdentity Identity => Principal?.Identity as ClaimsIdentity;
-
-        public void RunClaimActions() => RunClaimActions(User);
-
-        public void RunClaimActions(JObject userData)
-        {
-            if (userData == null)
-            {
-                throw new ArgumentNullException(nameof(userData));
-            }
-
-            foreach (var action in Options.ClaimActions)
-            {
-                action.Run(userData, Identity, Options.ClaimsIssuer ?? Scheme.Name);
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Events/OAuthEvents.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Events/OAuthEvents.cs
deleted file mode 100644
index 9e194491b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Events/OAuthEvents.cs
+++ /dev/null
@@ -1,41 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    /// <summary>
-    /// Default implementation.
-    /// </summary>
-    public class OAuthEvents : RemoteAuthenticationEvents
-    {
-        /// <summary>
-        /// Gets or sets the function that is invoked when the CreatingTicket method is invoked.
-        /// </summary>
-        public Func<OAuthCreatingTicketContext, Task> OnCreatingTicket { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Gets or sets the delegate that is invoked when the RedirectToAuthorizationEndpoint method is invoked.
-        /// </summary>
-        public Func<RedirectContext<OAuthOptions>, Task> OnRedirectToAuthorizationEndpoint { get; set; } = context =>
-        {
-            context.Response.Redirect(context.RedirectUri);
-            return Task.CompletedTask;
-        };
-
-        /// <summary>
-        /// Invoked after the provider successfully authenticates a user.
-        /// </summary>
-        /// <param name="context">Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.</param>
-        /// <returns>A <see cref="Task"/> representing the completed operation.</returns>
-        public virtual Task CreatingTicket(OAuthCreatingTicketContext context) => OnCreatingTicket(context);
-
-        /// <summary>
-        /// Called when a Challenge causes a redirect to authorize endpoint in the OAuth handler.
-        /// </summary>
-        /// <param name="context">Contains redirect URI and <see cref="AuthenticationProperties"/> of the challenge.</param>
-        public virtual Task RedirectToAuthorizationEndpoint(RedirectContext<OAuthOptions> context) => OnRedirectToAuthorizationEndpoint(context);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Microsoft.AspNetCore.Authentication.OAuth.csproj b/src/Microsoft.AspNetCore.Authentication.OAuth/Microsoft.AspNetCore.Authentication.OAuth.csproj
deleted file mode 100644
index 97d4a9703..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Microsoft.AspNetCore.Authentication.OAuth.csproj
+++ /dev/null
@@ -1,19 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core middleware that enables an application to support any standard OAuth 2.0 authentication workflow.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication\Microsoft.AspNetCore.Authentication.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Newtonsoft.Json" Version="$(NewtonsoftJsonPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthAppBuilderExtensions.cs
deleted file mode 100644
index d55f311f7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthAppBuilderExtensions.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.OAuth;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add OAuth 2.0 authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class OAuthAppBuilderExtensions
-    {
-        /// <summary>
-        /// UseOAuthAuthentication is obsolete. Configure OAuth authentication with AddAuthentication().AddOAuth in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseOAuthAuthentication is obsolete. Configure OAuth authentication with AddAuthentication().AddOAuth in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseOAuthAuthentication(this IApplicationBuilder app)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-
-        /// <summary>
-        /// UseOAuthAuthentication is obsolete. Configure OAuth authentication with AddAuthentication().AddOAuth in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">A <see cref="OAuthOptions"/> that specifies options for the handler.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseOAuthAuthentication is obsolete. Configure OAuth authentication with AddAuthentication().AddOAuth in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseOAuthAuthentication(this IApplicationBuilder app, OAuthOptions options)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthChallengeProperties.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthChallengeProperties.cs
deleted file mode 100644
index fc768a8ac..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthChallengeProperties.cs
+++ /dev/null
@@ -1,41 +0,0 @@
-using System.Collections.Generic;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    public class OAuthChallengeProperties : AuthenticationProperties
-    {
-        /// <summary>
-        /// The parameter key for the "scope" argument being used for a challenge request.
-        /// </summary>
-        public static readonly string ScopeKey = "scope";
-
-        public OAuthChallengeProperties()
-        { }
-
-        public OAuthChallengeProperties(IDictionary<string, string> items)
-            : base(items)
-        { }
-
-        public OAuthChallengeProperties(IDictionary<string, string> items, IDictionary<string, object> parameters)
-            : base(items, parameters)
-        { }
-
-        /// <summary>
-        /// The "scope" parameter value being used for a challenge request.
-        /// </summary>
-        public ICollection<string> Scope
-        {
-            get => GetParameter<ICollection<string>>(ScopeKey);
-            set => SetParameter(ScopeKey, value);
-        }
-
-        /// <summary>
-        /// Set the "scope" parameter value.
-        /// </summary>
-        /// <param name="scopes">List of scopes.</param>
-        public virtual void SetScope(params string[] scopes)
-        {
-            Scope = scopes;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthDefaults.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthDefaults.cs
deleted file mode 100644
index 376f8ab01..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthDefaults.cs
+++ /dev/null
@@ -1,10 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    public static class OAuthDefaults
-    {
-        public static readonly string DisplayName = "OAuth";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthExtensions.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthExtensions.cs
deleted file mode 100644
index 22c541a0a..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthExtensions.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    public static class OAuthExtensions
-    {
-        public static AuthenticationBuilder AddOAuth(this AuthenticationBuilder builder, string authenticationScheme, Action<OAuthOptions> configureOptions)
-            => builder.AddOAuth<OAuthOptions, OAuthHandler<OAuthOptions>>(authenticationScheme, configureOptions);
-
-        public static AuthenticationBuilder AddOAuth(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<OAuthOptions> configureOptions)
-            => builder.AddOAuth<OAuthOptions, OAuthHandler<OAuthOptions>>(authenticationScheme, displayName, configureOptions);
-
-        public static AuthenticationBuilder AddOAuth<TOptions, THandler>(this AuthenticationBuilder builder, string authenticationScheme, Action<TOptions> configureOptions)
-            where TOptions : OAuthOptions, new()
-            where THandler : OAuthHandler<TOptions>
-            => builder.AddOAuth<TOptions, THandler>(authenticationScheme, OAuthDefaults.DisplayName, configureOptions);
-
-        public static AuthenticationBuilder AddOAuth<TOptions, THandler>(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<TOptions> configureOptions)
-            where TOptions : OAuthOptions, new()
-            where THandler : OAuthHandler<TOptions>
-        {
-            builder.Services.TryAddEnumerable(ServiceDescriptor.Singleton<IPostConfigureOptions<TOptions>, OAuthPostConfigureOptions<TOptions, THandler>>());
-            return builder.AddRemoteScheme<TOptions, THandler>(authenticationScheme, displayName, configureOptions);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthHandler.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthHandler.cs
deleted file mode 100644
index 05ba4df68..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthHandler.cs
+++ /dev/null
@@ -1,253 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Globalization;
-using System.Net.Http;
-using System.Net.Http.Headers;
-using System.Security.Claims;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.WebUtilities;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Microsoft.Extensions.Primitives;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    public class OAuthHandler<TOptions> : RemoteAuthenticationHandler<TOptions> where TOptions : OAuthOptions, new()
-    {
-        protected HttpClient Backchannel => Options.Backchannel;
-
-        /// <summary>
-        /// The handler calls methods on the events which give the application control at certain points where processing is occurring. 
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        protected new OAuthEvents Events
-        {
-            get { return (OAuthEvents)base.Events; }
-            set { base.Events = value; }
-        }
-
-        public OAuthHandler(IOptionsMonitor<TOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        { }
-
-        /// <summary>
-        /// Creates a new instance of the events instance.
-        /// </summary>
-        /// <returns>A new instance of the events instance.</returns>
-        protected override Task<object> CreateEventsAsync() => Task.FromResult<object>(new OAuthEvents());
-
-        protected override async Task<HandleRequestResult> HandleRemoteAuthenticateAsync()
-        {
-            var query = Request.Query;
-
-            var state = query["state"];
-            var properties = Options.StateDataFormat.Unprotect(state);
-
-            if (properties == null)
-            {
-                return HandleRequestResult.Fail("The oauth state was missing or invalid.");
-            }
-
-            // OAuth2 10.12 CSRF
-            if (!ValidateCorrelationId(properties))
-            {
-                return HandleRequestResult.Fail("Correlation failed.", properties);
-            }
-
-            var error = query["error"];
-            if (!StringValues.IsNullOrEmpty(error))
-            {
-                // Note: access_denied errors are special protocol errors indicating the user didn't
-                // approve the authorization demand requested by the remote authorization server.
-                // Since it's a frequent scenario (that is not caused by incorrect configuration),
-                // denied errors are handled differently using HandleAccessDeniedErrorAsync().
-                // Visit https://tools.ietf.org/html/rfc6749#section-4.1.2.1 for more information.
-                if (StringValues.Equals(error, "access_denied"))
-                {
-                    return await HandleAccessDeniedErrorAsync(properties);
-                }
-
-                var failureMessage = new StringBuilder();
-                failureMessage.Append(error);
-                var errorDescription = query["error_description"];
-                if (!StringValues.IsNullOrEmpty(errorDescription))
-                {
-                    failureMessage.Append(";Description=").Append(errorDescription);
-                }
-                var errorUri = query["error_uri"];
-                if (!StringValues.IsNullOrEmpty(errorUri))
-                {
-                    failureMessage.Append(";Uri=").Append(errorUri);
-                }
-
-                return HandleRequestResult.Fail(failureMessage.ToString(), properties);
-            }
-
-            var code = query["code"];
-
-            if (StringValues.IsNullOrEmpty(code))
-            {
-                return HandleRequestResult.Fail("Code was not found.", properties);
-            }
-
-            var tokens = await ExchangeCodeAsync(code, BuildRedirectUri(Options.CallbackPath));
-
-            if (tokens.Error != null)
-            {
-                return HandleRequestResult.Fail(tokens.Error, properties);
-            }
-
-            if (string.IsNullOrEmpty(tokens.AccessToken))
-            {
-                return HandleRequestResult.Fail("Failed to retrieve access token.", properties);
-            }
-
-            var identity = new ClaimsIdentity(ClaimsIssuer);
-
-            if (Options.SaveTokens)
-            {
-                var authTokens = new List<AuthenticationToken>();
-
-                authTokens.Add(new AuthenticationToken { Name = "access_token", Value = tokens.AccessToken });
-                if (!string.IsNullOrEmpty(tokens.RefreshToken))
-                {
-                    authTokens.Add(new AuthenticationToken { Name = "refresh_token", Value = tokens.RefreshToken });
-                }
-
-                if (!string.IsNullOrEmpty(tokens.TokenType))
-                {
-                    authTokens.Add(new AuthenticationToken { Name = "token_type", Value = tokens.TokenType });
-                }
-
-                if (!string.IsNullOrEmpty(tokens.ExpiresIn))
-                {
-                    int value;
-                    if (int.TryParse(tokens.ExpiresIn, NumberStyles.Integer, CultureInfo.InvariantCulture, out value))
-                    {
-                        // https://www.w3.org/TR/xmlschema-2/#dateTime
-                        // https://msdn.microsoft.com/en-us/library/az4se3k1(v=vs.110).aspx
-                        var expiresAt = Clock.UtcNow + TimeSpan.FromSeconds(value);
-                        authTokens.Add(new AuthenticationToken
-                        {
-                            Name = "expires_at",
-                            Value = expiresAt.ToString("o", CultureInfo.InvariantCulture)
-                        });
-                    }
-                }
-
-                properties.StoreTokens(authTokens);
-            }
-
-            var ticket = await CreateTicketAsync(identity, properties, tokens);
-            if (ticket != null)
-            {
-                return HandleRequestResult.Success(ticket);
-            }
-            else
-            {
-                return HandleRequestResult.Fail("Failed to retrieve user information from remote server.", properties);
-            }
-        }
-
-        protected virtual async Task<OAuthTokenResponse> ExchangeCodeAsync(string code, string redirectUri)
-        {
-            var tokenRequestParameters = new Dictionary<string, string>()
-            {
-                { "client_id", Options.ClientId },
-                { "redirect_uri", redirectUri },
-                { "client_secret", Options.ClientSecret },
-                { "code", code },
-                { "grant_type", "authorization_code" },
-            };
-
-            var requestContent = new FormUrlEncodedContent(tokenRequestParameters);
-
-            var requestMessage = new HttpRequestMessage(HttpMethod.Post, Options.TokenEndpoint);
-            requestMessage.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
-            requestMessage.Content = requestContent;
-            var response = await Backchannel.SendAsync(requestMessage, Context.RequestAborted);
-            if (response.IsSuccessStatusCode)
-            {
-                var payload = JObject.Parse(await response.Content.ReadAsStringAsync());
-                return OAuthTokenResponse.Success(payload);
-            }
-            else
-            {
-                var error = "OAuth token endpoint failure: " + await Display(response);
-                return OAuthTokenResponse.Failed(new Exception(error));
-            }
-        }
-
-        private static async Task<string> Display(HttpResponseMessage response)
-        {
-            var output = new StringBuilder();
-            output.Append("Status: " + response.StatusCode + ";");
-            output.Append("Headers: " + response.Headers.ToString() + ";");
-            output.Append("Body: " + await response.Content.ReadAsStringAsync() + ";");
-            return output.ToString();
-        }
-
-        protected virtual async Task<AuthenticationTicket> CreateTicketAsync(ClaimsIdentity identity, AuthenticationProperties properties, OAuthTokenResponse tokens)
-        {
-            var context = new OAuthCreatingTicketContext(new ClaimsPrincipal(identity), properties, Context, Scheme, Options, Backchannel, tokens);
-            await Events.CreatingTicket(context);
-            return new AuthenticationTicket(context.Principal, context.Properties, Scheme.Name);
-        }
-
-        protected override async Task HandleChallengeAsync(AuthenticationProperties properties)
-        {
-            if (string.IsNullOrEmpty(properties.RedirectUri))
-            {
-                properties.RedirectUri = OriginalPathBase + OriginalPath + Request.QueryString;
-            }
-
-            // OAuth2 10.12 CSRF
-            GenerateCorrelationId(properties);
-
-            var authorizationEndpoint = BuildChallengeUrl(properties, BuildRedirectUri(Options.CallbackPath));
-            var redirectContext = new RedirectContext<OAuthOptions>(
-                Context, Scheme, Options,
-                properties, authorizationEndpoint);
-            await Events.RedirectToAuthorizationEndpoint(redirectContext);
-        }
-
-        protected virtual string BuildChallengeUrl(AuthenticationProperties properties, string redirectUri)
-        {
-            var scopeParameter = properties.GetParameter<ICollection<string>>(OAuthChallengeProperties.ScopeKey);
-            var scope = scopeParameter != null ? FormatScope(scopeParameter) : FormatScope();
-
-            var state = Options.StateDataFormat.Protect(properties);
-            var parameters = new Dictionary<string, string>
-            {
-                { "client_id", Options.ClientId },
-                { "scope", scope },
-                { "response_type", "code" },
-                { "redirect_uri", redirectUri },
-                { "state", state },
-            };
-            return QueryHelpers.AddQueryString(Options.AuthorizationEndpoint, parameters);
-        }
-
-        /// <summary>
-        /// Format a list of OAuth scopes.
-        /// </summary>
-        /// <param name="scopes">List of scopes.</param>
-        /// <returns>Formatted scopes.</returns>
-        protected virtual string FormatScope(IEnumerable<string> scopes)
-            => string.Join(" ", scopes); // OAuth2 3.3 space separated
-
-        /// <summary>
-        /// Format the <see cref="OAuthOptions.Scope"/> property.
-        /// </summary>
-        /// <returns>Formatted scopes.</returns>
-        /// <remarks>Subclasses should rather override <see cref="FormatScope(IEnumerable{string})"/>.</remarks>
-        protected virtual string FormatScope()
-            => FormatScope(Options.Scope);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthOptions.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthOptions.cs
deleted file mode 100644
index 4eacbd0b3..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthOptions.cs
+++ /dev/null
@@ -1,106 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Globalization;
-using Microsoft.AspNetCore.Authentication.OAuth.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    /// <summary>
-    /// Configuration options OAuth.
-    /// </summary>
-    public class OAuthOptions : RemoteAuthenticationOptions
-    {
-        public OAuthOptions()
-        {
-            Events = new OAuthEvents();
-        }
-
-        /// <summary>
-        /// Check that the options are valid.  Should throw an exception if things are not ok.
-        /// </summary>
-        public override void Validate()
-        {
-            base.Validate();
-
-            if (string.IsNullOrEmpty(ClientId))
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(ClientId)), nameof(ClientId));
-            }
-
-            if (string.IsNullOrEmpty(ClientSecret))
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(ClientSecret)), nameof(ClientSecret));
-            }
-
-            if (string.IsNullOrEmpty(AuthorizationEndpoint))
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(AuthorizationEndpoint)), nameof(AuthorizationEndpoint));
-            }
-
-            if (string.IsNullOrEmpty(TokenEndpoint))
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(TokenEndpoint)), nameof(TokenEndpoint));
-            }
-
-            if (!CallbackPath.HasValue)
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(CallbackPath)), nameof(CallbackPath));
-            }
-        }
-
-        /// <summary>
-        /// Gets or sets the provider-assigned client id.
-        /// </summary>
-        public string ClientId { get; set; }
-
-        /// <summary>
-        /// Gets or sets the provider-assigned client secret.
-        /// </summary>
-        public string ClientSecret { get; set; }
-
-        /// <summary>
-        /// Gets or sets the URI where the client will be redirected to authenticate.
-        /// </summary>
-        public string AuthorizationEndpoint { get; set; }
-
-        /// <summary>
-        /// Gets or sets the URI the middleware will access to exchange the OAuth token.
-        /// </summary>
-        public string TokenEndpoint { get; set; }
-
-        /// <summary>
-        /// Gets or sets the URI the middleware will access to obtain the user information.
-        /// This value is not used in the default implementation, it is for use in custom implementations of
-        /// IOAuthAuthenticationEvents.Authenticated or OAuthAuthenticationHandler.CreateTicketAsync.
-        /// </summary>
-        public string UserInformationEndpoint { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="OAuthEvents"/> used to handle authentication events.
-        /// </summary>
-        public new OAuthEvents Events
-        {
-            get { return (OAuthEvents)base.Events; }
-            set { base.Events = value; }
-        }
-
-        /// <summary>
-        /// A collection of claim actions used to select values from the json user data and create Claims.
-        /// </summary>
-        public ClaimActionCollection ClaimActions { get; } = new ClaimActionCollection();
-
-        /// <summary>
-        /// Gets the list of permissions to request.
-        /// </summary>
-        public ICollection<string> Scope { get; } = new HashSet<string>();
-
-        /// <summary>
-        /// Gets or sets the type used to secure data handled by the middleware.
-        /// </summary>
-        public ISecureDataFormat<AuthenticationProperties> StateDataFormat { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthPostConfigureOptions.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthPostConfigureOptions.cs
deleted file mode 100644
index e97346413..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthPostConfigureOptions.cs
+++ /dev/null
@@ -1,45 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Net.Http;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    /// <summary>
-    /// Used to setup defaults for the OAuthOptions.
-    /// </summary>
-    public class OAuthPostConfigureOptions<TOptions, THandler> : IPostConfigureOptions<TOptions>
-        where TOptions : OAuthOptions, new()
-        where THandler : OAuthHandler<TOptions>
-    {
-        private readonly IDataProtectionProvider _dp;
-
-        public OAuthPostConfigureOptions(IDataProtectionProvider dataProtection)
-        {
-            _dp = dataProtection;
-        }
-
-        public void PostConfigure(string name, TOptions options)
-        {
-            options.DataProtectionProvider = options.DataProtectionProvider ?? _dp;
-            if (options.Backchannel == null)
-            {
-                options.Backchannel = new HttpClient(options.BackchannelHttpHandler ?? new HttpClientHandler());
-                options.Backchannel.DefaultRequestHeaders.UserAgent.ParseAdd("Microsoft ASP.NET Core OAuth handler");
-                options.Backchannel.Timeout = options.BackchannelTimeout;
-                options.Backchannel.MaxResponseContentBufferSize = 1024 * 1024 * 10; // 10 MB
-            }
-
-            if (options.StateDataFormat == null)
-            {
-                var dataProtector = options.DataProtectionProvider.CreateProtector(
-                    typeof(THandler).FullName, name, "v1");
-                options.StateDataFormat = new PropertiesDataFormat(dataProtector);
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthTokenResponse.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthTokenResponse.cs
deleted file mode 100644
index aa4026b00..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthTokenResponse.cs
+++ /dev/null
@@ -1,42 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    public class OAuthTokenResponse
-    {
-        private OAuthTokenResponse(JObject response)
-        {
-            Response = response;
-            AccessToken = response.Value<string>("access_token");
-            TokenType = response.Value<string>("token_type");
-            RefreshToken = response.Value<string>("refresh_token");
-            ExpiresIn = response.Value<string>("expires_in");
-        }
-
-        private OAuthTokenResponse(Exception error)
-        {
-            Error = error;
-        }
-
-        public static OAuthTokenResponse Success(JObject response)
-        {
-            return new OAuthTokenResponse(response);
-        }
-
-        public static OAuthTokenResponse Failed(Exception error)
-        {
-            return new OAuthTokenResponse(error);
-        }
-
-        public JObject Response { get; set; }
-        public string AccessToken { get; set; }
-        public string TokenType { get; set; }
-        public string RefreshToken { get; set; }
-        public string ExpiresIn { get; set; }
-        public Exception Error { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication.OAuth/Properties/Resources.Designer.cs
deleted file mode 100644
index 5a38ade0b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,58 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.OAuth.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string Exception_OptionMustBeProvided
-        {
-            get => GetString("Exception_OptionMustBeProvided");
-        }
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string FormatException_OptionMustBeProvided(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_OptionMustBeProvided"), p0);
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string Exception_ValidatorHandlerMismatch
-        {
-            get => GetString("Exception_ValidatorHandlerMismatch");
-        }
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string FormatException_ValidatorHandlerMismatch()
-            => GetString("Exception_ValidatorHandlerMismatch");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/Resources.resx b/src/Microsoft.AspNetCore.Authentication.OAuth/Resources.resx
deleted file mode 100644
index 2a19bea96..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/Resources.resx
+++ /dev/null
@@ -1,126 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_OptionMustBeProvided" xml:space="preserve">
-    <value>The '{0}' option must be provided.</value>
-  </data>
-  <data name="Exception_ValidatorHandlerMismatch" xml:space="preserve">
-    <value>An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OAuth/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.OAuth/baseline.netcore.json
deleted file mode 100644
index 9c2394704..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OAuth/baseline.netcore.json
+++ /dev/null
@@ -1,1810 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.OAuth, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.OAuthExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddOAuth",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddOAuth",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddOAuth<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.OAuth.OAuthHandler<T0>"
-              ]
-            }
-          ]
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddOAuth<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.OAuth.OAuthHandler<T0>"
-              ]
-            }
-          ]
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.OAuthPostConfigureOptions<T0, T1>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.Extensions.Options.IPostConfigureOptions<T0>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "PostConfigure",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "T0"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Extensions.Options.IPostConfigureOptions<T0>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "dataProtection",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "New": true,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions"
-          ]
-        },
-        {
-          "ParameterName": "THandler",
-          "ParameterPosition": 1,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.OAuth.OAuthHandler<T0>"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.OAuthAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseOAuthAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseOAuthAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.ClaimActionCollectionMapExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "MapJsonKey",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MapJsonKey",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MapJsonSubKey",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            },
-            {
-              "Name": "subKey",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MapJsonSubKey",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            },
-            {
-              "Name": "subKey",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MapCustomJson",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "resolver",
-              "Type": "System.Func<Newtonsoft.Json.Linq.JObject, System.String>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MapCustomJson",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "resolver",
-              "Type": "System.Func<Newtonsoft.Json.Linq.JObject, System.String>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MapAll",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MapAllExcept",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "exclusions",
-              "Type": "System.String[]",
-              "IsParams": true
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "DeleteClaim",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "DeleteClaims",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimTypes",
-              "Type": "System.String[]",
-              "IsParams": true
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.OAuthCreatingTicketContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.ResultContext<Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_User",
-          "Parameters": [],
-          "ReturnType": "Newtonsoft.Json.Linq.JObject",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenResponse",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AccessToken",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenType",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RefreshToken",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ExpiresIn",
-          "Parameters": [],
-          "ReturnType": "System.Nullable<System.TimeSpan>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Backchannel",
-          "Parameters": [],
-          "ReturnType": "System.Net.Http.HttpClient",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Identity",
-          "Parameters": [],
-          "ReturnType": "System.Security.Claims.ClaimsIdentity",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RunClaimActions",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RunClaimActions",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions"
-            },
-            {
-              "Name": "backchannel",
-              "Type": "System.Net.Http.HttpClient"
-            },
-            {
-              "Name": "tokens",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions"
-            },
-            {
-              "Name": "backchannel",
-              "Type": "System.Net.Http.HttpClient"
-            },
-            {
-              "Name": "tokens",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse"
-            },
-            {
-              "Name": "user",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.OAuthEvents",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_OnCreatingTicket",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OAuth.OAuthCreatingTicketContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnCreatingTicket",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OAuth.OAuthCreatingTicketContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToAuthorizationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions>, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToAuthorizationEndpoint",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions>, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreatingTicket",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthCreatingTicketContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToAuthorizationEndpoint",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.OAuthChallengeProperties",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticationProperties",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Scope",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.ICollection<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Scope",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Collections.Generic.ICollection<System.String>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SetScope",
-          "Parameters": [
-            {
-              "Name": "scopes",
-              "Type": "System.String[]",
-              "IsParams": true
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "items",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.String>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "items",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.String>"
-            },
-            {
-              "Name": "parameters",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.Object>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "ScopeKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.OAuthDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "DisplayName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.OAuthHandler<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<T0>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Backchannel",
-          "Parameters": [],
-          "ReturnType": "System.Net.Http.HttpClient",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthEvents",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Object>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRemoteAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.HandleRequestResult>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ExchangeCodeAsync",
-          "Parameters": [
-            {
-              "Name": "code",
-              "Type": "System.String"
-            },
-            {
-              "Name": "redirectUri",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateTicketAsync",
-          "Parameters": [
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "tokens",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "BuildChallengeUrl",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "redirectUri",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "FormatScope",
-          "Parameters": [
-            {
-              "Name": "scopes",
-              "Type": "System.Collections.Generic.IEnumerable<System.String>"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "FormatScope",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<T0>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "New": true,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.OAuthOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClientId",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ClientId",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClientSecret",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ClientSecret",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AuthorizationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AuthorizationEndpoint",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenEndpoint",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_UserInformationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_UserInformationEndpoint",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthEvents",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.OAuthEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClaimActions",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Scope",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.ICollection<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_StateDataFormat",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationProperties>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_StateDataFormat",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationProperties>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Success",
-          "Parameters": [
-            {
-              "Name": "response",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Failed",
-          "Parameters": [
-            {
-              "Name": "error",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthTokenResponse",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Response",
-          "Parameters": [],
-          "ReturnType": "Newtonsoft.Json.Linq.JObject",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Response",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AccessToken",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AccessToken",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenType",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenType",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RefreshToken",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RefreshToken",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ExpiresIn",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ExpiresIn",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Error",
-          "Parameters": [],
-          "ReturnType": "System.Exception",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Error",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ClaimType",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ValueType",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Run",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "issuer",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Abstract": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Clear",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Remove",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Add",
-          "Parameters": [
-            {
-              "Name": "action",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "GetEnumerator",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IEnumerator<Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction>",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.Claims.CustomJsonClaimAction",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Resolver",
-          "Parameters": [],
-          "ReturnType": "System.Func<Newtonsoft.Json.Linq.JObject, System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Run",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "issuer",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "resolver",
-              "Type": "System.Func<Newtonsoft.Json.Linq.JObject, System.String>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.Claims.DeleteClaimAction",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Run",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "issuer",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.Claims.JsonKeyClaimAction",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_JsonKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Run",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "issuer",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.Claims.JsonSubKeyClaimAction",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.JsonKeyClaimAction",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_SubKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Run",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "issuer",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            },
-            {
-              "Name": "subKey",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OAuth.Claims.MapAllClaimsAction",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimAction",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Run",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "issuer",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Claims/ClaimActionCollectionUniqueExtensions.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Claims/ClaimActionCollectionUniqueExtensions.cs
deleted file mode 100644
index 4e349579f..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Claims/ClaimActionCollectionUniqueExtensions.cs
+++ /dev/null
@@ -1,39 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication.OAuth.Claims;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect.Claims;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public static class ClaimActionCollectionUniqueExtensions
-    {
-        /// <summary>
-        /// Selects a top level value from the json user data with the given key name and adds it as a Claim.
-        /// This no-ops if the ClaimsIdentity already contains a Claim with the given ClaimType.
-        /// This no-ops if the key is not found or the value is empty.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        public static void MapUniqueJsonKey(this ClaimActionCollection collection, string claimType, string jsonKey)
-        {
-            collection.MapUniqueJsonKey(claimType, jsonKey, ClaimValueTypes.String);
-        }
-
-        /// <summary>
-        /// Selects a top level value from the json user data with the given key name and adds it as a Claim.
-        /// This no-ops if the ClaimsIdentity already contains a Claim with the given ClaimType.
-        /// This no-ops if the key is not found or the value is empty.
-        /// </summary>
-        /// <param name="collection"></param>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        public static void MapUniqueJsonKey(this ClaimActionCollection collection, string claimType, string jsonKey, string valueType)
-        {
-            collection.Add(new UniqueJsonKeyClaimAction(claimType, valueType, jsonKey));
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Claims/UniqueJsonKeyClaimAction.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Claims/UniqueJsonKeyClaimAction.cs
deleted file mode 100644
index 132885b3c..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Claims/UniqueJsonKeyClaimAction.cs
+++ /dev/null
@@ -1,61 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.IdentityModel.Tokens.Jwt;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication.OAuth.Claims;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect.Claims
-{
-    /// <summary>
-    /// A ClaimAction that selects a top level value from the json user data with the given key name and adds it as a Claim.
-    /// This no-ops if the ClaimsIdentity already contains a Claim with the given ClaimType.
-    /// This no-ops if the key is not found or the value is empty.
-    /// </summary>
-    public class UniqueJsonKeyClaimAction : JsonKeyClaimAction
-    {
-        /// <summary>
-        /// Creates a new UniqueJsonKeyClaimAction.
-        /// </summary>
-        /// <param name="claimType">The value to use for Claim.Type when creating a Claim.</param>
-        /// <param name="valueType">The value to use for Claim.ValueType when creating a Claim.</param>
-        /// <param name="jsonKey">The top level key to look for in the json user data.</param>
-        public UniqueJsonKeyClaimAction(string claimType, string valueType, string jsonKey)
-            : base(claimType, valueType, jsonKey)
-        {
-        }
-
-        /// <inheritdoc />
-        public override void Run(JObject userData, ClaimsIdentity identity, string issuer)
-        {
-            var value = userData?.Value<string>(JsonKey);
-            if (string.IsNullOrEmpty(value))
-            {
-                // Not found
-                return;
-            }
-
-            var claim = identity.FindFirst(c => string.Equals(c.Type, JsonKey, System.StringComparison.OrdinalIgnoreCase));
-            if (claim != null && string.Equals(claim.Value, value, System.StringComparison.Ordinal))
-            {
-                // Duplicate
-                return;
-            }
-
-            claim = identity.FindFirst(c =>
-            {
-                // If this claimType is mapped by the JwtSeurityTokenHandler, then this property will be set
-                return c.Properties.TryGetValue(JwtSecurityTokenHandler.ShortClaimTypeProperty, out var shortType)
-                    && string.Equals(shortType, JsonKey, System.StringComparison.OrdinalIgnoreCase);
-            });
-            if (claim != null && string.Equals(claim.Value, value, System.StringComparison.Ordinal))
-            {
-                // Duplicate with an alternate name.
-                return;
-            }
-
-            identity.AddClaim(new Claim(ClaimType, value, ValueType, issuer));
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/AuthenticationFailedContext.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/AuthenticationFailedContext.cs
deleted file mode 100644
index 203da93c5..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/AuthenticationFailedContext.cs
+++ /dev/null
@@ -1,20 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    public class AuthenticationFailedContext : RemoteAuthenticationContext<OpenIdConnectOptions>
-    {
-        public AuthenticationFailedContext(HttpContext context, AuthenticationScheme scheme, OpenIdConnectOptions options)
-            : base(context, scheme, options, new AuthenticationProperties())
-        { }
-
-        public OpenIdConnectMessage ProtocolMessage { get; set; }
-
-        public Exception Exception { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/AuthorizationCodeReceivedContext.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/AuthorizationCodeReceivedContext.cs
deleted file mode 100644
index bdf6e4a7f..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/AuthorizationCodeReceivedContext.cs
+++ /dev/null
@@ -1,93 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.IdentityModel.Tokens.Jwt;
-using System.Net.Http;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// This Context can be used to be informed when an 'AuthorizationCode' is received over the OpenIdConnect protocol.
-    /// </summary>
-    public class AuthorizationCodeReceivedContext : RemoteAuthenticationContext<OpenIdConnectOptions>
-    {
-        /// <summary>
-        /// Creates a <see cref="AuthorizationCodeReceivedContext"/>
-        /// </summary>
-        public AuthorizationCodeReceivedContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            OpenIdConnectOptions options,
-            AuthenticationProperties properties)
-            : base(context, scheme, options, properties) { }
-
-        public OpenIdConnectMessage ProtocolMessage { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="JwtSecurityToken"/> that was received in the authentication response, if any.
-        /// </summary>
-        public JwtSecurityToken JwtSecurityToken { get; set; }
-
-        /// <summary>
-        /// The request that will be sent to the token endpoint and is available for customization.
-        /// </summary>
-        public OpenIdConnectMessage TokenEndpointRequest { get; set; }
-
-        /// <summary>
-        /// The configured communication channel to the identity provider for use when making custom requests to the token endpoint.
-        /// </summary>
-        public HttpClient Backchannel { get; internal set; }
-
-        /// <summary>
-        /// If the developer chooses to redeem the code themselves then they can provide the resulting tokens here. This is the
-        /// same as calling HandleCodeRedemption. If set then the handler will not attempt to redeem the code. An IdToken
-        /// is required if one had not been previously received in the authorization response. An access token is optional
-        /// if the handler is to contact the user-info endpoint.
-        /// </summary>
-        public OpenIdConnectMessage TokenEndpointResponse { get; set; }
-
-        /// <summary>
-        /// Indicates if the developer choose to handle (or skip) the code redemption. If true then the handler will not attempt
-        /// to redeem the code. See HandleCodeRedemption and TokenEndpointResponse.
-        /// </summary>
-        public bool HandledCodeRedemption => TokenEndpointResponse != null;
-
-        /// <summary>
-        /// Tells the handler to skip the code redemption process. The developer may have redeemed the code themselves, or
-        /// decided that the redemption was not required. If tokens were retrieved that are needed for further processing then
-        /// call one of the overloads that allows providing tokens. An IdToken is required if one had not been previously received
-        /// in the authorization response. An access token can optionally be provided for the handler to contact the
-        /// user-info endpoint. Calling this is the same as setting TokenEndpointResponse.
-        /// </summary>
-        public void HandleCodeRedemption()
-        {
-            TokenEndpointResponse = new OpenIdConnectMessage();
-        }
-
-        /// <summary>
-        /// Tells the handler to skip the code redemption process. The developer may have redeemed the code themselves, or
-        /// decided that the redemption was not required. If tokens were retrieved that are needed for further processing then
-        /// call one of the overloads that allows providing tokens. An IdToken is required if one had not been previously received
-        /// in the authorization response. An access token can optionally be provided for the handler to contact the
-        /// user-info endpoint. Calling this is the same as setting TokenEndpointResponse.
-        /// </summary>
-        public void HandleCodeRedemption(string accessToken, string idToken)
-        {
-            TokenEndpointResponse = new OpenIdConnectMessage() { AccessToken = accessToken, IdToken = idToken };
-        }
-
-        /// <summary>
-        /// Tells the handler to skip the code redemption process. The developer may have redeemed the code themselves, or
-        /// decided that the redemption was not required. If tokens were retrieved that are needed for further processing then
-        /// call one of the overloads that allows providing tokens. An IdToken is required if one had not been previously received
-        /// in the authorization response. An access token can optionally be provided for the handler to contact the
-        /// user-info endpoint. Calling this is the same as setting TokenEndpointResponse.
-        /// </summary>
-        public void HandleCodeRedemption(OpenIdConnectMessage tokenEndpointResponse)
-        {
-            TokenEndpointResponse = tokenEndpointResponse;
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/MessageReceivedContext.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/MessageReceivedContext.cs
deleted file mode 100644
index 7d06e4479..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/MessageReceivedContext.cs
+++ /dev/null
@@ -1,25 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    public class MessageReceivedContext : RemoteAuthenticationContext<OpenIdConnectOptions>
-    {
-        public MessageReceivedContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            OpenIdConnectOptions options,
-            AuthenticationProperties properties)
-            : base(context, scheme, options, properties) { }
-
-        public OpenIdConnectMessage ProtocolMessage { get; set; }
-
-        /// <summary>
-        /// Bearer Token. This will give the application an opportunity to retrieve a token from an alternative location.
-        /// </summary>
-        public string Token { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/OpenIdConnectEvents.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/OpenIdConnectEvents.cs
deleted file mode 100644
index 2a48d250b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/OpenIdConnectEvents.cs
+++ /dev/null
@@ -1,86 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// Specifies events which the <see cref="OpenIdConnectHandler" />invokes to enable developer control over the authentication process.
-    /// </summary>
-    public class OpenIdConnectEvents : RemoteAuthenticationEvents
-    {
-        /// <summary>
-        /// Invoked if exceptions are thrown during request processing. The exceptions will be re-thrown after this event unless suppressed.
-        /// </summary>
-        public Func<AuthenticationFailedContext, Task> OnAuthenticationFailed { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked after security token validation if an authorization code is present in the protocol message.
-        /// </summary>
-        public Func<AuthorizationCodeReceivedContext, Task> OnAuthorizationCodeReceived { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked when a protocol message is first received.
-        /// </summary>
-        public Func<MessageReceivedContext, Task> OnMessageReceived { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked before redirecting to the identity provider to authenticate. This can be used to set ProtocolMessage.State
-        /// that will be persisted through the authentication process. The ProtocolMessage can also be used to add or customize
-        /// parameters sent to the identity provider.
-        /// </summary>
-        public Func<RedirectContext, Task> OnRedirectToIdentityProvider { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked before redirecting to the identity provider to sign out.
-        /// </summary>
-        public Func<RedirectContext, Task> OnRedirectToIdentityProviderForSignOut { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked before redirecting to the <see cref="OpenIdConnectOptions.SignedOutRedirectUri"/> at the end of a remote sign-out flow.
-        /// </summary>
-        public Func<RemoteSignOutContext, Task> OnSignedOutCallbackRedirect { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked when a request is received on the RemoteSignOutPath.
-        /// </summary>
-        public Func<RemoteSignOutContext, Task> OnRemoteSignOut { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked after "authorization code" is redeemed for tokens at the token endpoint.
-        /// </summary>
-        public Func<TokenResponseReceivedContext, Task> OnTokenResponseReceived { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked when an IdToken has been validated and produced an AuthenticationTicket.
-        /// </summary>
-        public Func<TokenValidatedContext, Task> OnTokenValidated { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked when user information is retrieved from the UserInfoEndpoint.
-        /// </summary>
-        public Func<UserInformationReceivedContext, Task> OnUserInformationReceived { get; set; } = context => Task.CompletedTask;
-
-        public virtual Task AuthenticationFailed(AuthenticationFailedContext context) => OnAuthenticationFailed(context);
-
-        public virtual Task AuthorizationCodeReceived(AuthorizationCodeReceivedContext context) => OnAuthorizationCodeReceived(context);
-
-        public virtual Task MessageReceived(MessageReceivedContext context) => OnMessageReceived(context);
-
-        public virtual Task RedirectToIdentityProvider(RedirectContext context) => OnRedirectToIdentityProvider(context);
-
-        public virtual Task RedirectToIdentityProviderForSignOut(RedirectContext context) => OnRedirectToIdentityProviderForSignOut(context);
-
-        public virtual Task SignedOutCallbackRedirect(RemoteSignOutContext context) => OnSignedOutCallbackRedirect(context);
-
-        public virtual Task RemoteSignOut(RemoteSignOutContext context) => OnRemoteSignOut(context);
-
-        public virtual Task TokenResponseReceived(TokenResponseReceivedContext context) => OnTokenResponseReceived(context);
-
-        public virtual Task TokenValidated(TokenValidatedContext context) => OnTokenValidated(context);
-
-        public virtual Task UserInformationReceived(UserInformationReceivedContext context) => OnUserInformationReceived(context);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/RedirectContext.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/RedirectContext.cs
deleted file mode 100644
index 9961c237d..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/RedirectContext.cs
+++ /dev/null
@@ -1,34 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// When a user configures the <see cref="OpenIdConnectHandler"/> to be notified prior to redirecting to an IdentityProvider
-    /// an instance of <see cref="RedirectContext"/> is passed to the 'RedirectToAuthenticationEndpoint' or 'RedirectToEndSessionEndpoint' events.
-    /// </summary>
-    public class RedirectContext : PropertiesContext<OpenIdConnectOptions>
-    {
-        public RedirectContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            OpenIdConnectOptions options,
-            AuthenticationProperties properties)
-            : base(context, scheme, options, properties) { }
-
-        public OpenIdConnectMessage ProtocolMessage { get; set; }
-
-        /// <summary>
-        /// If true, will skip any default logic for this redirect.
-        /// </summary>
-        public bool Handled { get; private set; }
-
-        /// <summary>
-        /// Skips any default logic for this redirect.
-        /// </summary>
-        public void HandleResponse() => Handled = true;
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/RemoteSignoutContext.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/RemoteSignoutContext.cs
deleted file mode 100644
index 26720a58f..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/RemoteSignoutContext.cs
+++ /dev/null
@@ -1,17 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    public class RemoteSignOutContext : RemoteAuthenticationContext<OpenIdConnectOptions>
-    {
-        public RemoteSignOutContext(HttpContext context, AuthenticationScheme scheme, OpenIdConnectOptions options, OpenIdConnectMessage message)
-            : base(context, scheme, options, new AuthenticationProperties())
-            => ProtocolMessage = message;
-
-        public OpenIdConnectMessage ProtocolMessage { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/TokenResponseReceivedContext.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/TokenResponseReceivedContext.cs
deleted file mode 100644
index 2bebdb8dc..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/TokenResponseReceivedContext.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// This Context can be used to be informed when an 'AuthorizationCode' is redeemed for tokens at the token endpoint.
-    /// </summary>
-    public class TokenResponseReceivedContext : RemoteAuthenticationContext<OpenIdConnectOptions>
-    {
-        /// <summary>
-        /// Creates a <see cref="TokenResponseReceivedContext"/>
-        /// </summary>
-        public TokenResponseReceivedContext(HttpContext context, AuthenticationScheme scheme, OpenIdConnectOptions options, ClaimsPrincipal user, AuthenticationProperties properties)
-            : base(context, scheme, options, properties)
-            => Principal = user;
-
-        public OpenIdConnectMessage ProtocolMessage { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="OpenIdConnectMessage"/> that contains the tokens received after redeeming the code at the token endpoint.
-        /// </summary>
-        public OpenIdConnectMessage TokenEndpointResponse { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/TokenValidatedContext.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/TokenValidatedContext.cs
deleted file mode 100644
index 853857dc7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/TokenValidatedContext.cs
+++ /dev/null
@@ -1,28 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.IdentityModel.Tokens.Jwt;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    public class TokenValidatedContext : RemoteAuthenticationContext<OpenIdConnectOptions>
-    {
-        /// <summary>
-        /// Creates a <see cref="TokenValidatedContext"/>
-        /// </summary>
-        public TokenValidatedContext(HttpContext context, AuthenticationScheme scheme, OpenIdConnectOptions options, ClaimsPrincipal principal, AuthenticationProperties properties)
-            : base(context, scheme, options, properties)
-            => Principal = principal;
-
-        public OpenIdConnectMessage ProtocolMessage { get; set; }
-
-        public JwtSecurityToken SecurityToken { get; set; }
-
-        public OpenIdConnectMessage TokenEndpointResponse { get; set; }
-
-        public string Nonce { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/UserInformationReceivedContext.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/UserInformationReceivedContext.cs
deleted file mode 100644
index 0b855eaf3..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Events/UserInformationReceivedContext.cs
+++ /dev/null
@@ -1,21 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    public class UserInformationReceivedContext : RemoteAuthenticationContext<OpenIdConnectOptions>
-    {
-        public UserInformationReceivedContext(HttpContext context, AuthenticationScheme scheme, OpenIdConnectOptions options, ClaimsPrincipal principal, AuthenticationProperties properties)
-            : base(context, scheme, options, properties)
-            => Principal = principal;
-
-        public OpenIdConnectMessage ProtocolMessage { get; set; }
-
-        public JObject User { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/LoggingExtensions.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/LoggingExtensions.cs
deleted file mode 100644
index 224af87b6..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/LoggingExtensions.cs
+++ /dev/null
@@ -1,508 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.Extensions.Logging
-{
-    internal static class LoggingExtensions
-    {
-        private static Action<ILogger, Exception> _redirectToIdentityProviderForSignOutHandledResponse;
-        private static Action<ILogger, Exception> _redirectToIdentityProviderHandledResponse;
-        private static Action<ILogger, Exception> _signoutCallbackRedirectHandledResponse;
-        private static Action<ILogger, Exception> _signoutCallbackRedirectSkipped;
-        private static Action<ILogger, Exception> _updatingConfiguration;
-        private static Action<ILogger, Exception> _receivedIdToken;
-        private static Action<ILogger, Exception> _redeemingCodeForTokens;
-        private static Action<ILogger, string, Exception> _enteringOpenIdAuthenticationHandlerHandleRemoteAuthenticateAsync;
-        private static Action<ILogger, string, Exception> _enteringOpenIdAuthenticationHandlerHandleUnauthorizedAsync;
-        private static Action<ILogger, string, Exception> _enteringOpenIdAuthenticationHandlerHandleSignOutAsync;
-        private static Action<ILogger, string, Exception> _messageReceived;
-        private static Action<ILogger, Exception> _messageReceivedContextHandledResponse;
-        private static Action<ILogger, Exception> _messageReceivedContextSkipped;
-        private static Action<ILogger, Exception> _authorizationCodeReceived;
-        private static Action<ILogger, Exception> _configurationManagerRequestRefreshCalled;
-        private static Action<ILogger, Exception> _tokenResponseReceived;
-        private static Action<ILogger, Exception> _tokenValidatedHandledResponse;
-        private static Action<ILogger, Exception> _tokenValidatedSkipped;
-        private static Action<ILogger, Exception> _authenticationFailedContextHandledResponse;
-        private static Action<ILogger, Exception> _authenticationFailedContextSkipped;
-        private static Action<ILogger, Exception> _authorizationCodeReceivedContextHandledResponse;
-        private static Action<ILogger, Exception> _authorizationCodeReceivedContextSkipped;
-        private static Action<ILogger, Exception> _tokenResponseReceivedHandledResponse;
-        private static Action<ILogger, Exception> _tokenResponseReceivedSkipped;
-        private static Action<ILogger, string, Exception> _userInformationReceived;
-        private static Action<ILogger, Exception> _userInformationReceivedHandledResponse;
-        private static Action<ILogger, Exception> _userInformationReceivedSkipped;
-        private static Action<ILogger, string, Exception> _invalidLogoutQueryStringRedirectUrl;
-        private static Action<ILogger, Exception> _nullOrEmptyAuthorizationResponseState;
-        private static Action<ILogger, Exception> _unableToReadAuthorizationResponseState;
-        private static Action<ILogger, string, string, string, Exception> _responseError;
-        private static Action<ILogger, string, string, string, int, Exception> _responseErrorWithStatusCode;
-        private static Action<ILogger, Exception> _exceptionProcessingMessage;
-        private static Action<ILogger, Exception> _accessTokenNotAvailable;
-        private static Action<ILogger, Exception> _retrievingClaims;
-        private static Action<ILogger, Exception> _userInfoEndpointNotSet;
-        private static Action<ILogger, Exception> _unableToProtectNonceCookie;
-        private static Action<ILogger, string, Exception> _invalidAuthenticationRequestUrl;
-        private static Action<ILogger, string, Exception> _unableToReadIdToken;
-        private static Action<ILogger, string, Exception> _invalidSecurityTokenType;
-        private static Action<ILogger, string, Exception> _unableToValidateIdToken;
-        private static Action<ILogger, string, Exception> _postAuthenticationLocalRedirect;
-        private static Action<ILogger, string, Exception> _postSignOutRedirect;
-        private static Action<ILogger, Exception> _remoteSignOutHandledResponse;
-        private static Action<ILogger, Exception> _remoteSignOutSkipped;
-        private static Action<ILogger, Exception> _remoteSignOut;
-        private static Action<ILogger, Exception> _remoteSignOutSessionIdMissing;
-        private static Action<ILogger, Exception> _remoteSignOutSessionIdInvalid;
-        private static Action<ILogger, string, Exception> _signOut;
-
-        static LoggingExtensions()
-        {
-            // Final
-            _redirectToIdentityProviderForSignOutHandledResponse = LoggerMessage.Define(
-                eventId: 1,
-                logLevel: LogLevel.Debug,
-                formatString: "RedirectToIdentityProviderForSignOut.HandledResponse");
-            _invalidLogoutQueryStringRedirectUrl = LoggerMessage.Define<string>(
-                eventId: 3,
-                logLevel: LogLevel.Warning,
-                formatString: "The query string for Logout is not a well-formed URI. Redirect URI: '{RedirectUrl}'.");
-            _enteringOpenIdAuthenticationHandlerHandleUnauthorizedAsync = LoggerMessage.Define<string>(
-                eventId: 4,
-                logLevel: LogLevel.Trace,
-                formatString: "Entering {OpenIdConnectHandlerType}'s HandleUnauthorizedAsync.");
-            _enteringOpenIdAuthenticationHandlerHandleSignOutAsync = LoggerMessage.Define<string>(
-                eventId: 14,
-                logLevel: LogLevel.Trace,
-                formatString: "Entering {OpenIdConnectHandlerType}'s HandleSignOutAsync.");
-            _postAuthenticationLocalRedirect = LoggerMessage.Define<string>(
-                eventId: 5,
-                logLevel: LogLevel.Trace,
-                formatString: "Using properties.RedirectUri for 'local redirect' post authentication: '{RedirectUri}'.");
-            _redirectToIdentityProviderHandledResponse = LoggerMessage.Define(
-                eventId: 6,
-                logLevel: LogLevel.Debug,
-                formatString: "RedirectToIdentityProvider.HandledResponse");
-            _invalidAuthenticationRequestUrl = LoggerMessage.Define<string>(
-                eventId: 8,
-                logLevel: LogLevel.Warning,
-                formatString: "The redirect URI is not well-formed. The URI is: '{AuthenticationRequestUrl}'.");
-            _enteringOpenIdAuthenticationHandlerHandleRemoteAuthenticateAsync = LoggerMessage.Define<string>(
-                eventId: 9,
-                logLevel: LogLevel.Trace,
-                formatString: "Entering {OpenIdConnectHandlerType}'s HandleRemoteAuthenticateAsync.");
-            _nullOrEmptyAuthorizationResponseState = LoggerMessage.Define(
-                eventId: 10,
-                logLevel: LogLevel.Debug,
-                formatString: "message.State is null or empty.");
-            _unableToReadAuthorizationResponseState = LoggerMessage.Define(
-                eventId: 11,
-                logLevel: LogLevel.Debug,
-                formatString: "Unable to read the message.State.");
-            _responseError = LoggerMessage.Define<string, string, string>(
-                eventId: 12,
-                logLevel: LogLevel.Error,
-                formatString: "Message contains error: '{Error}', error_description: '{ErrorDescription}', error_uri: '{ErrorUri}'.");
-            _responseErrorWithStatusCode = LoggerMessage.Define<string, string, string, int>(
-                eventId: 49,
-                logLevel: LogLevel.Error,
-                formatString: "Message contains error: '{Error}', error_description: '{ErrorDescription}', error_uri: '{ErrorUri}', status code '{StatusCode}'.");
-            _updatingConfiguration = LoggerMessage.Define(
-                eventId: 13,
-                logLevel: LogLevel.Debug,
-                formatString: "Updating configuration");
-            _tokenValidatedHandledResponse = LoggerMessage.Define(
-                eventId: 15,
-                logLevel: LogLevel.Debug,
-                formatString: "TokenValidated.HandledResponse");
-            _tokenValidatedSkipped = LoggerMessage.Define(
-                eventId: 16,
-                logLevel: LogLevel.Debug,
-                formatString: "TokenValidated.Skipped");
-            _exceptionProcessingMessage = LoggerMessage.Define(
-                eventId: 17,
-                logLevel: LogLevel.Error,
-                formatString: "Exception occurred while processing message.");
-            _configurationManagerRequestRefreshCalled = LoggerMessage.Define(
-                eventId: 18,
-                logLevel: LogLevel.Debug,
-                formatString: "Exception of type 'SecurityTokenSignatureKeyNotFoundException' thrown, Options.ConfigurationManager.RequestRefresh() called.");
-            _redeemingCodeForTokens = LoggerMessage.Define(
-                eventId: 19,
-                logLevel: LogLevel.Debug,
-                formatString: "Redeeming code for tokens.");
-            _retrievingClaims = LoggerMessage.Define(
-                eventId: 20,
-                logLevel: LogLevel.Trace,
-                formatString: "Retrieving claims from the user info endpoint.");
-            _receivedIdToken = LoggerMessage.Define(
-                eventId: 21,
-                logLevel: LogLevel.Debug,
-                formatString: "Received 'id_token'");
-            _userInfoEndpointNotSet = LoggerMessage.Define(
-                eventId: 22,
-                logLevel: LogLevel.Debug,
-                formatString: "UserInfoEndpoint is not set. Claims cannot be retrieved.");
-            _unableToProtectNonceCookie = LoggerMessage.Define(
-                eventId: 23,
-                logLevel: LogLevel.Warning,
-                formatString: "Failed to un-protect the nonce cookie.");
-            _messageReceived = LoggerMessage.Define<string>(
-                eventId: 24,
-                logLevel: LogLevel.Trace,
-                formatString: "MessageReceived: '{RedirectUrl}'.");
-            _messageReceivedContextHandledResponse = LoggerMessage.Define(
-                eventId: 25,
-                logLevel: LogLevel.Debug,
-                formatString: "MessageReceivedContext.HandledResponse");
-            _messageReceivedContextSkipped = LoggerMessage.Define(
-                eventId: 26,
-                logLevel: LogLevel.Debug,
-                formatString: "MessageReceivedContext.Skipped");
-            _authorizationCodeReceived = LoggerMessage.Define(
-                eventId: 27,
-                logLevel: LogLevel.Trace,
-                formatString: "Authorization code received.");
-            _authorizationCodeReceivedContextHandledResponse = LoggerMessage.Define(
-                eventId: 28,
-                logLevel: LogLevel.Debug,
-                formatString: "AuthorizationCodeReceivedContext.HandledResponse");
-            _authorizationCodeReceivedContextSkipped = LoggerMessage.Define(
-                eventId: 29,
-                logLevel: LogLevel.Debug,
-                formatString: "AuthorizationCodeReceivedContext.Skipped");
-            _tokenResponseReceived = LoggerMessage.Define(
-                eventId: 30,
-                logLevel: LogLevel.Trace,
-                formatString: "Token response received.");
-            _tokenResponseReceivedHandledResponse = LoggerMessage.Define(
-                eventId: 31,
-                logLevel: LogLevel.Debug,
-                formatString: "TokenResponseReceived.HandledResponse");
-            _tokenResponseReceivedSkipped = LoggerMessage.Define(
-                eventId: 32,
-                logLevel: LogLevel.Debug,
-                formatString: "TokenResponseReceived.Skipped");
-            _postSignOutRedirect = LoggerMessage.Define<string>(
-                eventId: 33,
-                logLevel: LogLevel.Trace,
-                formatString: "Using properties.RedirectUri for redirect post authentication: '{RedirectUri}'.");
-            _userInformationReceived = LoggerMessage.Define<string>(
-               eventId: 35,
-               logLevel: LogLevel.Trace,
-               formatString: "User information received: {User}");
-            _userInformationReceivedHandledResponse = LoggerMessage.Define(
-                eventId: 36,
-                logLevel: LogLevel.Debug,
-                formatString: "The UserInformationReceived event returned Handled.");
-            _userInformationReceivedSkipped = LoggerMessage.Define(
-                eventId: 37,
-                logLevel: LogLevel.Debug,
-                formatString: "The UserInformationReceived event returned Skipped.");
-            _authenticationFailedContextHandledResponse = LoggerMessage.Define(
-                eventId: 38,
-                logLevel: LogLevel.Debug,
-                formatString: "AuthenticationFailedContext.HandledResponse");
-            _authenticationFailedContextSkipped = LoggerMessage.Define(
-                eventId: 39,
-                logLevel: LogLevel.Debug,
-                formatString: "AuthenticationFailedContext.Skipped");
-            _invalidSecurityTokenType = LoggerMessage.Define<string>(
-               eventId: 40,
-               logLevel: LogLevel.Error,
-               formatString: "The Validated Security Token must be of type JwtSecurityToken, but instead its type is: '{SecurityTokenType}'");
-            _unableToValidateIdToken = LoggerMessage.Define<string>(
-               eventId: 41,
-               logLevel: LogLevel.Error,
-               formatString: "Unable to validate the 'id_token', no suitable ISecurityTokenValidator was found for: '{IdToken}'.");
-            _accessTokenNotAvailable = LoggerMessage.Define(
-               eventId: 42,
-               logLevel: LogLevel.Debug,
-               formatString: "The access_token is not available. Claims cannot be retrieved.");
-            _unableToReadIdToken = LoggerMessage.Define<string>(
-               eventId: 43,
-               logLevel: LogLevel.Error,
-               formatString: "Unable to read the 'id_token', no suitable ISecurityTokenValidator was found for: '{IdToken}'.");
-            _remoteSignOutHandledResponse = LoggerMessage.Define(
-               eventId: 44,
-               logLevel: LogLevel.Debug,
-               formatString: "RemoteSignOutContext.HandledResponse");
-            _remoteSignOutSkipped = LoggerMessage.Define(
-               eventId: 45,
-               logLevel: LogLevel.Debug,
-               formatString: "RemoteSignOutContext.Skipped");
-            _remoteSignOut = LoggerMessage.Define(
-               eventId: 46,
-               logLevel: LogLevel.Information,
-               formatString: "Remote signout request processed.");
-            _remoteSignOutSessionIdMissing = LoggerMessage.Define(
-               eventId: 47,
-               logLevel: LogLevel.Error,
-               formatString: "The remote signout request was ignored because the 'sid' parameter " +
-                             "was missing, which may indicate an unsolicited logout.");
-            _remoteSignOutSessionIdInvalid = LoggerMessage.Define(
-               eventId: 48,
-               logLevel: LogLevel.Error,
-               formatString: "The remote signout request was ignored because the 'sid' parameter didn't match " +
-                             "the expected value, which may indicate an unsolicited logout.");
-            _signOut = LoggerMessage.Define<string>(
-                 eventId: 49,
-                 logLevel: LogLevel.Information,
-                 formatString: "AuthenticationScheme: {AuthenticationScheme} signed out.");
-            _signoutCallbackRedirectHandledResponse = LoggerMessage.Define(
-                eventId: 50,
-                logLevel: LogLevel.Debug,
-                formatString: "RedirectToSignedOutRedirectUri.HandledResponse");
-            _signoutCallbackRedirectSkipped = LoggerMessage.Define(
-                eventId: 51,
-                logLevel: LogLevel.Debug,
-                formatString: "RedirectToSignedOutRedirectUri.Skipped");
-        }
-
-        public static void UpdatingConfiguration(this ILogger logger)
-        {
-            _updatingConfiguration(logger, null);
-        }
-
-        public static void ConfigurationManagerRequestRefreshCalled(this ILogger logger)
-        {
-            _configurationManagerRequestRefreshCalled(logger, null);
-        }
-
-        public static void AuthorizationCodeReceived(this ILogger logger)
-        {
-            _authorizationCodeReceived(logger, null);
-        }
-
-        public static void TokenResponseReceived(this ILogger logger)
-        {
-            _tokenResponseReceived(logger, null);
-        }
-
-        public static void ReceivedIdToken(this ILogger logger)
-        {
-            _receivedIdToken(logger, null);
-        }
-
-        public static void RedeemingCodeForTokens(this ILogger logger)
-        {
-            _redeemingCodeForTokens(logger, null);
-        }
-
-        public static void TokenValidatedHandledResponse(this ILogger logger)
-        {
-            _tokenValidatedHandledResponse(logger, null);
-        }
-
-        public static void TokenValidatedSkipped(this ILogger logger)
-        {
-            _tokenValidatedSkipped(logger, null);
-        }
-
-        public static void AuthorizationCodeReceivedContextHandledResponse(this ILogger logger)
-        {
-            _authorizationCodeReceivedContextHandledResponse(logger, null);
-        }
-
-        public static void AuthorizationCodeReceivedContextSkipped(this ILogger logger)
-        {
-            _authorizationCodeReceivedContextSkipped(logger, null);
-        }
-
-        public static void TokenResponseReceivedHandledResponse(this ILogger logger)
-        {
-            _tokenResponseReceivedHandledResponse(logger, null);
-        }
-
-        public static void TokenResponseReceivedSkipped(this ILogger logger)
-        {
-            _tokenResponseReceivedSkipped(logger, null);
-        }
-
-        public static void AuthenticationFailedContextHandledResponse(this ILogger logger)
-        {
-            _authenticationFailedContextHandledResponse(logger, null);
-        }
-
-        public static void AuthenticationFailedContextSkipped(this ILogger logger)
-        {
-            _authenticationFailedContextSkipped(logger, null);
-        }
-
-        public static void MessageReceived(this ILogger logger, string redirectUrl)
-        {
-            _messageReceived(logger, redirectUrl, null);
-        }
-
-        public static void MessageReceivedContextHandledResponse(this ILogger logger)
-        {
-            _messageReceivedContextHandledResponse(logger, null);
-        }
-
-        public static void MessageReceivedContextSkipped(this ILogger logger)
-        {
-            _messageReceivedContextSkipped(logger, null);
-        }
-
-        public static void RedirectToIdentityProviderForSignOutHandledResponse(this ILogger logger)
-        {
-            _redirectToIdentityProviderForSignOutHandledResponse(logger, null);
-        }
-
-        public static void RedirectToIdentityProviderHandledResponse(this ILogger logger)
-        {
-            _redirectToIdentityProviderHandledResponse(logger, null);
-        }
-
-        public static void SignoutCallbackRedirectHandledResponse(this ILogger logger)
-        {
-            _signoutCallbackRedirectHandledResponse(logger, null);
-        }
-
-        public static void SignoutCallbackRedirectSkipped(this ILogger logger)
-        {
-            _signoutCallbackRedirectSkipped(logger, null);
-        }
-
-        public static void UserInformationReceivedHandledResponse(this ILogger logger)
-        {
-            _userInformationReceivedHandledResponse(logger, null);
-        }
-
-        public static void UserInformationReceivedSkipped(this ILogger logger)
-        {
-            _userInformationReceivedSkipped(logger, null);
-        }
-
-        public static void InvalidLogoutQueryStringRedirectUrl(this ILogger logger, string redirectUrl)
-        {
-            _invalidLogoutQueryStringRedirectUrl(logger, redirectUrl, null);
-        }
-
-        public static void NullOrEmptyAuthorizationResponseState(this ILogger logger)
-        {
-            _nullOrEmptyAuthorizationResponseState(logger, null);
-        }
-
-        public static void UnableToReadAuthorizationResponseState(this ILogger logger)
-        {
-            _unableToReadAuthorizationResponseState(logger, null);
-        }
-
-        public static void ResponseError(this ILogger logger, string error, string errorDescription, string errorUri)
-        {
-            _responseError(logger, error, errorDescription, errorUri, null);
-        }
-
-        public static void ResponseErrorWithStatusCode(this ILogger logger, string error, string errorDescription, string errorUri, int statusCode)
-        {
-            _responseErrorWithStatusCode(logger, error, errorDescription, errorUri, statusCode, null);
-        }
-
-        public static void ExceptionProcessingMessage(this ILogger logger, Exception ex)
-        {
-            _exceptionProcessingMessage(logger, ex);
-        }
-
-        public static void AccessTokenNotAvailable(this ILogger logger)
-        {
-            _accessTokenNotAvailable(logger, null);
-        }
-
-        public static void RetrievingClaims(this ILogger logger)
-        {
-            _retrievingClaims(logger, null);
-        }
-
-        public static void UserInfoEndpointNotSet(this ILogger logger)
-        {
-            _userInfoEndpointNotSet(logger, null);
-        }
-
-        public static void UnableToProtectNonceCookie(this ILogger logger, Exception ex)
-        {
-            _unableToProtectNonceCookie(logger, ex);
-        }
-
-        public static void InvalidAuthenticationRequestUrl(this ILogger logger, string redirectUri)
-        {
-            _invalidAuthenticationRequestUrl(logger, redirectUri, null);
-        }
-
-        public static void UnableToReadIdToken(this ILogger logger, string idToken)
-        {
-            _unableToReadIdToken(logger, idToken, null);
-        }
-
-        public static void InvalidSecurityTokenType(this ILogger logger, string tokenType)
-        {
-            _invalidSecurityTokenType(logger, tokenType, null);
-        }
-
-        public static void UnableToValidateIdToken(this ILogger logger, string idToken)
-        {
-            _unableToValidateIdToken(logger, idToken, null);
-        }
-
-        public static void EnteringOpenIdAuthenticationHandlerHandleRemoteAuthenticateAsync(this ILogger logger, string openIdConnectHandlerTypeName)
-        {
-            _enteringOpenIdAuthenticationHandlerHandleRemoteAuthenticateAsync(logger, openIdConnectHandlerTypeName, null);
-        }
-
-        public static void EnteringOpenIdAuthenticationHandlerHandleUnauthorizedAsync(this ILogger logger, string openIdConnectHandlerTypeName)
-        {
-            _enteringOpenIdAuthenticationHandlerHandleUnauthorizedAsync(logger, openIdConnectHandlerTypeName, null);
-        }
-
-        public static void EnteringOpenIdAuthenticationHandlerHandleSignOutAsync(this ILogger logger, string openIdConnectHandlerTypeName)
-        {
-            _enteringOpenIdAuthenticationHandlerHandleSignOutAsync(logger, openIdConnectHandlerTypeName, null);
-        }
-
-        public static void UserInformationReceived(this ILogger logger, string user)
-        {
-            _userInformationReceived(logger, user, null);
-        }
-
-        public static void PostAuthenticationLocalRedirect(this ILogger logger, string redirectUri)
-        {
-            _postAuthenticationLocalRedirect(logger, redirectUri, null);
-        }
-
-        public static void PostSignOutRedirect(this ILogger logger, string redirectUri)
-        {
-            _postSignOutRedirect(logger, redirectUri, null);
-        }
-
-        public static void RemoteSignOutHandledResponse(this ILogger logger)
-        {
-            _remoteSignOutHandledResponse(logger, null);
-        }
-
-        public static void RemoteSignOutSkipped(this ILogger logger)
-        {
-            _remoteSignOutSkipped(logger, null);
-        }
-
-        public static void RemoteSignOut(this ILogger logger)
-        {
-            _remoteSignOut(logger, null);
-        }
-
-        public static void RemoteSignOutSessionIdMissing(this ILogger logger)
-        {
-            _remoteSignOutSessionIdMissing(logger, null);
-        }
-
-        public static void RemoteSignOutSessionIdInvalid(this ILogger logger)
-        {
-            _remoteSignOutSessionIdInvalid(logger, null);
-        }
-
-        public static void SignedOut(this ILogger logger, string authenticationScheme)
-        {
-            _signOut(logger, authenticationScheme, null);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Microsoft.AspNetCore.Authentication.OpenIdConnect.csproj b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Microsoft.AspNetCore.Authentication.OpenIdConnect.csproj
deleted file mode 100644
index 65ca6b842..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Microsoft.AspNetCore.Authentication.OpenIdConnect.csproj
+++ /dev/null
@@ -1,19 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core middleware that enables an application to support the OpenID Connect authentication workflow.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication.OAuth\Microsoft.AspNetCore.Authentication.OAuth.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="$(MicrosoftIdentityModelProtocolsOpenIdConnectPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectAppBuilderExtensions.cs
deleted file mode 100644
index 0746ae3fd..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectAppBuilderExtensions.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add OpenID Connect authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class OpenIdConnectAppBuilderExtensions
-    {
-        /// <summary>
-        /// UseOpenIdConnectAuthentication is obsolete. Configure OpenIdConnect authentication with AddAuthentication().AddOpenIdConnect in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseOpenIdConnectAuthentication is obsolete. Configure OpenIdConnect authentication with AddAuthentication().AddOpenIdConnect in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseOpenIdConnectAuthentication(this IApplicationBuilder app)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-
-        /// <summary>
-        /// UseOpenIdConnectAuthentication is obsolete. Configure OpenIdConnect authentication with AddAuthentication().AddOpenIdConnect in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">A <see cref="OpenIdConnectOptions"/> that specifies options for the handler.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseOpenIdConnectAuthentication is obsolete. Configure OpenIdConnect authentication with AddAuthentication().AddOpenIdConnect in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseOpenIdConnectAuthentication(this IApplicationBuilder app, OpenIdConnectOptions options)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectChallengeProperties.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectChallengeProperties.cs
deleted file mode 100644
index 0ced488de..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectChallengeProperties.cs
+++ /dev/null
@@ -1,49 +0,0 @@
-using System;
-using System.Collections.Generic;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    public class OpenIdConnectChallengeProperties : OAuthChallengeProperties
-    {
-        /// <summary>
-        /// The parameter key for the "max_age" argument being used for a challenge request.
-        /// </summary>
-        public static readonly string MaxAgeKey = OpenIdConnectParameterNames.MaxAge;
-
-        /// <summary>
-        /// The parameter key for the "prompt" argument being used for a challenge request.
-        /// </summary>
-        public static readonly string PromptKey = OpenIdConnectParameterNames.Prompt;
-
-        public OpenIdConnectChallengeProperties()
-        { }
-
-        public OpenIdConnectChallengeProperties(IDictionary<string, string> items)
-            : base(items)
-        { }
-
-        public OpenIdConnectChallengeProperties(IDictionary<string, string> items, IDictionary<string, object> parameters)
-            : base(items, parameters)
-        { }
-
-        /// <summary>
-        /// The "max_age" parameter value being used for a challenge request.
-        /// </summary>
-        public TimeSpan? MaxAge
-        {
-            get => GetParameter<TimeSpan?>(MaxAgeKey);
-            set => SetParameter(MaxAgeKey, value);
-        }
-
-        /// <summary>
-        /// The "prompt" parameter value being used for a challenge request.
-        /// </summary>
-        public string Prompt
-        {
-            get => GetParameter<string>(PromptKey);
-            set => SetParameter(PromptKey, value);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectDefaults.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectDefaults.cs
deleted file mode 100644
index f98ba87e0..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectDefaults.cs
+++ /dev/null
@@ -1,41 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// Default values related to OpenIdConnect authentication handler
-    /// </summary>
-    public static class OpenIdConnectDefaults
-    {
-        /// <summary>
-        /// Constant used to identify state in openIdConnect protocol message.
-        /// </summary>
-        public static readonly string AuthenticationPropertiesKey = "OpenIdConnect.AuthenticationProperties";
-
-        /// <summary>
-        /// The default value used for OpenIdConnectOptions.AuthenticationScheme.
-        /// </summary>
-        public const string AuthenticationScheme = "OpenIdConnect";
-
-        /// <summary>
-        /// The default value for the display name.
-        /// </summary>
-        public static readonly string DisplayName = "OpenIdConnect";
-
-        /// <summary>
-        /// The prefix used to for the nonce in the cookie.
-        /// </summary>
-        public static readonly string CookieNoncePrefix = ".AspNetCore.OpenIdConnect.Nonce.";
-
-        /// <summary>
-        /// The property for the RedirectUri that was used when asking for a 'authorizationCode'.
-        /// </summary>
-        public static readonly string RedirectUriForCodePropertiesKey = "OpenIdConnect.Code.RedirectUri";
-
-        /// <summary>
-        /// Constant used to identify userstate inside AuthenticationProperties that have been serialized in the 'state' parameter.
-        /// </summary>
-        public static readonly string UserstatePropertiesKey = "OpenIdConnect.Userstate";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectExtensions.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectExtensions.cs
deleted file mode 100644
index f427bebaf..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectExtensions.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    public static class OpenIdConnectExtensions
-    {
-        public static AuthenticationBuilder AddOpenIdConnect(this AuthenticationBuilder builder)
-            => builder.AddOpenIdConnect(OpenIdConnectDefaults.AuthenticationScheme, _ => { });
-
-        public static AuthenticationBuilder AddOpenIdConnect(this AuthenticationBuilder builder, Action<OpenIdConnectOptions> configureOptions)
-            => builder.AddOpenIdConnect(OpenIdConnectDefaults.AuthenticationScheme, configureOptions);
-
-        public static AuthenticationBuilder AddOpenIdConnect(this AuthenticationBuilder builder, string authenticationScheme, Action<OpenIdConnectOptions> configureOptions)
-            => builder.AddOpenIdConnect(authenticationScheme, OpenIdConnectDefaults.DisplayName, configureOptions);
-
-        public static AuthenticationBuilder AddOpenIdConnect(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<OpenIdConnectOptions> configureOptions)
-        {
-            builder.Services.TryAddEnumerable(ServiceDescriptor.Singleton<IPostConfigureOptions<OpenIdConnectOptions>, OpenIdConnectPostConfigureOptions>());
-            return builder.AddRemoteScheme<OpenIdConnectOptions, OpenIdConnectHandler>(authenticationScheme, displayName, configureOptions);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectHandler.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectHandler.cs
deleted file mode 100644
index 8b0b72428..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectHandler.cs
+++ /dev/null
@@ -1,1250 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Globalization;
-using System.IdentityModel.Tokens.Jwt;
-using System.Linq;
-using System.Net.Http;
-using System.Net.Http.Headers;
-using System.Security.Claims;
-using System.Security.Cryptography;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Microsoft.IdentityModel.Tokens;
-using Microsoft.Net.Http.Headers;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// A per-request authentication handler for the OpenIdConnectAuthenticationMiddleware.
-    /// </summary>
-    public class OpenIdConnectHandler : RemoteAuthenticationHandler<OpenIdConnectOptions>, IAuthenticationSignOutHandler
-    {
-        private const string NonceProperty = "N";
-
-        private const string HeaderValueEpocDate = "Thu, 01 Jan 1970 00:00:00 GMT";
-
-        private static readonly RandomNumberGenerator CryptoRandom = RandomNumberGenerator.Create();
-
-        private OpenIdConnectConfiguration _configuration;
-
-        protected HttpClient Backchannel => Options.Backchannel;
-
-        protected HtmlEncoder HtmlEncoder { get; }
-
-        public OpenIdConnectHandler(IOptionsMonitor<OpenIdConnectOptions> options, ILoggerFactory logger, HtmlEncoder htmlEncoder, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        {
-            HtmlEncoder = htmlEncoder;
-        }
-
-        /// <summary>
-        /// The handler calls methods on the events which give the application control at certain points where processing is occurring.
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        protected new OpenIdConnectEvents Events
-        {
-            get { return (OpenIdConnectEvents)base.Events; }
-            set { base.Events = value; }
-        }
-
-        protected override Task<object> CreateEventsAsync() => Task.FromResult<object>(new OpenIdConnectEvents());
-
-        public override Task<bool> HandleRequestAsync()
-        {
-            if (Options.RemoteSignOutPath.HasValue && Options.RemoteSignOutPath == Request.Path)
-            {
-                return HandleRemoteSignOutAsync();
-            }
-            else if (Options.SignedOutCallbackPath.HasValue && Options.SignedOutCallbackPath == Request.Path)
-            {
-                return HandleSignOutCallbackAsync();
-            }
-
-            return base.HandleRequestAsync();
-        }
-
-        protected virtual async Task<bool> HandleRemoteSignOutAsync()
-        {
-            OpenIdConnectMessage message = null;
-
-            if (string.Equals(Request.Method, "GET", StringComparison.OrdinalIgnoreCase))
-            {
-                message = new OpenIdConnectMessage(Request.Query.Select(pair => new KeyValuePair<string, string[]>(pair.Key, pair.Value)));
-            }
-
-            // assumption: if the ContentType is "application/x-www-form-urlencoded" it should be safe to read as it is small.
-            else if (string.Equals(Request.Method, "POST", StringComparison.OrdinalIgnoreCase)
-              && !string.IsNullOrEmpty(Request.ContentType)
-              // May have media/type; charset=utf-8, allow partial match.
-              && Request.ContentType.StartsWith("application/x-www-form-urlencoded", StringComparison.OrdinalIgnoreCase)
-              && Request.Body.CanRead)
-            {
-                var form = await Request.ReadFormAsync();
-                message = new OpenIdConnectMessage(form.Select(pair => new KeyValuePair<string, string[]>(pair.Key, pair.Value)));
-            }
-
-            var remoteSignOutContext = new RemoteSignOutContext(Context, Scheme, Options, message);
-            await Events.RemoteSignOut(remoteSignOutContext);
-
-            if (remoteSignOutContext.Result != null)
-            {
-                if (remoteSignOutContext.Result.Handled)
-                {
-                    Logger.RemoteSignOutHandledResponse();
-                    return true;
-                }
-                if (remoteSignOutContext.Result.Skipped)
-                {
-                    Logger.RemoteSignOutSkipped();
-                    return false;
-                }
-                if (remoteSignOutContext.Result.Failure != null)
-                {
-                    throw new InvalidOperationException("An error was returned from the RemoteSignOut event.", remoteSignOutContext.Result.Failure);
-                }
-            }
-
-            if (message == null)
-            {
-                return false;
-            }
-
-            // Try to extract the session identifier from the authentication ticket persisted by the sign-in handler.
-            // If the identifier cannot be found, bypass the session identifier checks: this may indicate that the
-            // authentication cookie was already cleared, that the session identifier was lost because of a lossy
-            // external/application cookie conversion or that the identity provider doesn't support sessions.
-            var sid = (await Context.AuthenticateAsync(Options.SignOutScheme))
-                          ?.Principal
-                          ?.FindFirst(JwtRegisteredClaimNames.Sid)
-                          ?.Value;
-            if (!string.IsNullOrEmpty(sid))
-            {
-                // Ensure a 'sid' parameter was sent by the identity provider.
-                if (string.IsNullOrEmpty(message.Sid))
-                {
-                    Logger.RemoteSignOutSessionIdMissing();
-                    return true;
-                }
-                // Ensure the 'sid' parameter corresponds to the 'sid' stored in the authentication ticket.
-                if (!string.Equals(sid, message.Sid, StringComparison.Ordinal))
-                {
-                    Logger.RemoteSignOutSessionIdInvalid();
-                    return true;
-                }
-            }
-
-            Logger.RemoteSignOut();
-
-            // We've received a remote sign-out request
-            await Context.SignOutAsync(Options.SignOutScheme);
-            return true;
-        }
-
-        /// <summary>
-        /// Redirect user to the identity provider for sign out
-        /// </summary>
-        /// <returns>A task executing the sign out procedure</returns>
-        public async virtual Task SignOutAsync(AuthenticationProperties properties)
-        {
-            var target = ResolveTarget(Options.ForwardSignOut);
-            if (target != null)
-            {
-                await Context.SignOutAsync(target, properties);
-                return;
-            }
-
-            properties = properties ?? new AuthenticationProperties();
-
-            Logger.EnteringOpenIdAuthenticationHandlerHandleSignOutAsync(GetType().FullName);
-
-            if (_configuration == null && Options.ConfigurationManager != null)
-            {
-                _configuration = await Options.ConfigurationManager.GetConfigurationAsync(Context.RequestAborted);
-            }
-
-            var message = new OpenIdConnectMessage()
-            {
-                EnableTelemetryParameters = !Options.DisableTelemetry,
-                IssuerAddress = _configuration?.EndSessionEndpoint ?? string.Empty,
-
-                // Redirect back to SigneOutCallbackPath first before user agent is redirected to actual post logout redirect uri
-                PostLogoutRedirectUri = BuildRedirectUriIfRelative(Options.SignedOutCallbackPath)
-            };
-
-            // Get the post redirect URI.
-            if (string.IsNullOrEmpty(properties.RedirectUri))
-            {
-                properties.RedirectUri = BuildRedirectUriIfRelative(Options.SignedOutRedirectUri);
-                if (string.IsNullOrWhiteSpace(properties.RedirectUri))
-                {
-                    properties.RedirectUri = OriginalPathBase + OriginalPath + Request.QueryString;
-                }
-            }
-            Logger.PostSignOutRedirect(properties.RedirectUri);
-
-            // Attach the identity token to the logout request when possible.
-            message.IdTokenHint = await Context.GetTokenAsync(Options.SignOutScheme, OpenIdConnectParameterNames.IdToken);
-
-            var redirectContext = new RedirectContext(Context, Scheme, Options, properties)
-            {
-                ProtocolMessage = message
-            };
-
-            await Events.RedirectToIdentityProviderForSignOut(redirectContext);
-            if (redirectContext.Handled)
-            {
-                Logger.RedirectToIdentityProviderForSignOutHandledResponse();
-                return;
-            }
-
-            message = redirectContext.ProtocolMessage;
-
-            if (!string.IsNullOrEmpty(message.State))
-            {
-                properties.Items[OpenIdConnectDefaults.UserstatePropertiesKey] = message.State;
-            }
-
-            message.State = Options.StateDataFormat.Protect(properties);
-
-            if (string.IsNullOrEmpty(message.IssuerAddress))
-            {
-                throw new InvalidOperationException("Cannot redirect to the end session endpoint, the configuration may be missing or invalid.");
-            }
-
-            if (Options.AuthenticationMethod == OpenIdConnectRedirectBehavior.RedirectGet)
-            {
-                var redirectUri = message.CreateLogoutRequestUrl();
-                if (!Uri.IsWellFormedUriString(redirectUri, UriKind.Absolute))
-                {
-                    Logger.InvalidLogoutQueryStringRedirectUrl(redirectUri);
-                }
-
-                Response.Redirect(redirectUri);
-            }
-            else if (Options.AuthenticationMethod == OpenIdConnectRedirectBehavior.FormPost)
-            {
-                var content = message.BuildFormPost();
-                var buffer = Encoding.UTF8.GetBytes(content);
-
-                Response.ContentLength = buffer.Length;
-                Response.ContentType = "text/html;charset=UTF-8";
-
-                // Emit Cache-Control=no-cache to prevent client caching.
-                Response.Headers[HeaderNames.CacheControl] = "no-cache";
-                Response.Headers[HeaderNames.Pragma] = "no-cache";
-                Response.Headers[HeaderNames.Expires] = HeaderValueEpocDate;
-
-                await Response.Body.WriteAsync(buffer, 0, buffer.Length);
-            }
-            else
-            {
-                throw new NotImplementedException($"An unsupported authentication method has been configured: {Options.AuthenticationMethod}");
-            }
-
-            Logger.SignedOut(Scheme.Name);
-        }
-
-        /// <summary>
-        /// Response to the callback from OpenId provider after session ended.
-        /// </summary>
-        /// <returns>A task executing the callback procedure</returns>
-        protected async virtual Task<bool> HandleSignOutCallbackAsync()
-        {
-            var message = new OpenIdConnectMessage(Request.Query.Select(pair => new KeyValuePair<string, string[]>(pair.Key, pair.Value)));
-            AuthenticationProperties properties = null;
-            if (!string.IsNullOrEmpty(message.State))
-            {
-                properties = Options.StateDataFormat.Unprotect(message.State);
-            }
-
-            var signOut = new RemoteSignOutContext(Context, Scheme, Options, message)
-            {
-                Properties = properties,
-            };
-
-            await Events.SignedOutCallbackRedirect(signOut);
-            if (signOut.Result != null)
-            {
-                if (signOut.Result.Handled)
-                {
-                    Logger.SignoutCallbackRedirectHandledResponse();
-                    return true;
-                }
-                if (signOut.Result.Skipped)
-                {
-                    Logger.SignoutCallbackRedirectSkipped();
-                    return false;
-                }
-                if (signOut.Result.Failure != null)
-                {
-                    throw new InvalidOperationException("An error was returned from the SignedOutCallbackRedirect event.", signOut.Result.Failure);
-                }
-            }
-
-            properties = signOut.Properties;
-            if (!string.IsNullOrEmpty(properties?.RedirectUri))
-            {
-                Response.Redirect(properties.RedirectUri);
-            }
-
-            return true;
-        }
-
-        /// <summary>
-        /// Responds to a 401 Challenge. Sends an OpenIdConnect message to the 'identity authority' to obtain an identity.
-        /// </summary>
-        /// <returns></returns>
-        protected override async Task HandleChallengeAsync(AuthenticationProperties properties)
-        {
-            Logger.EnteringOpenIdAuthenticationHandlerHandleUnauthorizedAsync(GetType().FullName);
-
-            // order for local RedirectUri
-            // 1. challenge.Properties.RedirectUri
-            // 2. CurrentUri if RedirectUri is not set)
-            if (string.IsNullOrEmpty(properties.RedirectUri))
-            {
-                properties.RedirectUri = OriginalPathBase + OriginalPath + Request.QueryString;
-            }
-            Logger.PostAuthenticationLocalRedirect(properties.RedirectUri);
-
-            if (_configuration == null && Options.ConfigurationManager != null)
-            {
-                _configuration = await Options.ConfigurationManager.GetConfigurationAsync(Context.RequestAborted);
-            }
-
-            var message = new OpenIdConnectMessage
-            {
-                ClientId = Options.ClientId,
-                EnableTelemetryParameters = !Options.DisableTelemetry,
-                IssuerAddress = _configuration?.AuthorizationEndpoint ?? string.Empty,
-                RedirectUri = BuildRedirectUri(Options.CallbackPath),
-                Resource = Options.Resource,
-                ResponseType = Options.ResponseType,
-                Prompt = properties.GetParameter<string>(OpenIdConnectParameterNames.Prompt) ?? Options.Prompt,
-                Scope = string.Join(" ", properties.GetParameter<ICollection<string>>(OpenIdConnectParameterNames.Scope) ?? Options.Scope),
-            };
-
-            // Add the 'max_age' parameter to the authentication request if MaxAge is not null.
-            // See http://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
-            var maxAge = properties.GetParameter<TimeSpan?>(OpenIdConnectParameterNames.MaxAge) ?? Options.MaxAge;
-            if (maxAge.HasValue)
-            {
-                message.MaxAge = Convert.ToInt64(Math.Floor((maxAge.Value).TotalSeconds))
-                    .ToString(CultureInfo.InvariantCulture);
-            }
-
-            // Omitting the response_mode parameter when it already corresponds to the default
-            // response_mode used for the specified response_type is recommended by the specifications.
-            // See http://openid.net/specs/oauth-v2-multiple-response-types-1_0.html#ResponseModes
-            if (!string.Equals(Options.ResponseType, OpenIdConnectResponseType.Code, StringComparison.Ordinal) ||
-                !string.Equals(Options.ResponseMode, OpenIdConnectResponseMode.Query, StringComparison.Ordinal))
-            {
-                message.ResponseMode = Options.ResponseMode;
-            }
-
-            if (Options.ProtocolValidator.RequireNonce)
-            {
-                message.Nonce = Options.ProtocolValidator.GenerateNonce();
-                WriteNonceCookie(message.Nonce);
-            }
-
-            GenerateCorrelationId(properties);
-
-            var redirectContext = new RedirectContext(Context, Scheme, Options, properties)
-            {
-                ProtocolMessage = message
-            };
-
-            await Events.RedirectToIdentityProvider(redirectContext);
-            if (redirectContext.Handled)
-            {
-                Logger.RedirectToIdentityProviderHandledResponse();
-                return;
-            }
-
-            message = redirectContext.ProtocolMessage;
-
-            if (!string.IsNullOrEmpty(message.State))
-            {
-                properties.Items[OpenIdConnectDefaults.UserstatePropertiesKey] = message.State;
-            }
-
-            // When redeeming a 'code' for an AccessToken, this value is needed
-            properties.Items.Add(OpenIdConnectDefaults.RedirectUriForCodePropertiesKey, message.RedirectUri);
-
-            message.State = Options.StateDataFormat.Protect(properties);
-
-            if (string.IsNullOrEmpty(message.IssuerAddress))
-            {
-                throw new InvalidOperationException(
-                    "Cannot redirect to the authorization endpoint, the configuration may be missing or invalid.");
-            }
-
-            if (Options.AuthenticationMethod == OpenIdConnectRedirectBehavior.RedirectGet)
-            {
-                var redirectUri = message.CreateAuthenticationRequestUrl();
-                if (!Uri.IsWellFormedUriString(redirectUri, UriKind.Absolute))
-                {
-                    Logger.InvalidAuthenticationRequestUrl(redirectUri);
-                }
-
-                Response.Redirect(redirectUri);
-                return;
-            }
-            else if (Options.AuthenticationMethod == OpenIdConnectRedirectBehavior.FormPost)
-            {
-                var content = message.BuildFormPost();
-                var buffer = Encoding.UTF8.GetBytes(content);
-
-                Response.ContentLength = buffer.Length;
-                Response.ContentType = "text/html;charset=UTF-8";
-
-                // Emit Cache-Control=no-cache to prevent client caching.
-                Response.Headers[HeaderNames.CacheControl] = "no-cache";
-                Response.Headers[HeaderNames.Pragma] = "no-cache";
-                Response.Headers[HeaderNames.Expires] = HeaderValueEpocDate;
-
-                await Response.Body.WriteAsync(buffer, 0, buffer.Length);
-                return;
-            }
-
-            throw new NotImplementedException($"An unsupported authentication method has been configured: {Options.AuthenticationMethod}");
-        }
-
-        /// <summary>
-        /// Invoked to process incoming OpenIdConnect messages.
-        /// </summary>
-        /// <returns>An <see cref="HandleRequestResult"/>.</returns>
-        protected override async Task<HandleRequestResult> HandleRemoteAuthenticateAsync()
-        {
-            Logger.EnteringOpenIdAuthenticationHandlerHandleRemoteAuthenticateAsync(GetType().FullName);
-
-            OpenIdConnectMessage authorizationResponse = null;
-
-            if (string.Equals(Request.Method, "GET", StringComparison.OrdinalIgnoreCase))
-            {
-                authorizationResponse = new OpenIdConnectMessage(Request.Query.Select(pair => new KeyValuePair<string, string[]>(pair.Key, pair.Value)));
-
-                // response_mode=query (explicit or not) and a response_type containing id_token
-                // or token are not considered as a safe combination and MUST be rejected.
-                // See http://openid.net/specs/oauth-v2-multiple-response-types-1_0.html#Security
-                if (!string.IsNullOrEmpty(authorizationResponse.IdToken) || !string.IsNullOrEmpty(authorizationResponse.AccessToken))
-                {
-                    if (Options.SkipUnrecognizedRequests)
-                    {
-                        // Not for us?
-                        return HandleRequestResult.SkipHandler();
-                    }
-                    return HandleRequestResult.Fail("An OpenID Connect response cannot contain an " +
-                            "identity token or an access token when using response_mode=query");
-                }
-            }
-            // assumption: if the ContentType is "application/x-www-form-urlencoded" it should be safe to read as it is small.
-            else if (string.Equals(Request.Method, "POST", StringComparison.OrdinalIgnoreCase)
-              && !string.IsNullOrEmpty(Request.ContentType)
-              // May have media/type; charset=utf-8, allow partial match.
-              && Request.ContentType.StartsWith("application/x-www-form-urlencoded", StringComparison.OrdinalIgnoreCase)
-              && Request.Body.CanRead)
-            {
-                var form = await Request.ReadFormAsync();
-                authorizationResponse = new OpenIdConnectMessage(form.Select(pair => new KeyValuePair<string, string[]>(pair.Key, pair.Value)));
-            }
-
-            if (authorizationResponse == null)
-            {
-                if (Options.SkipUnrecognizedRequests)
-                {
-                    // Not for us?
-                    return HandleRequestResult.SkipHandler();
-                }
-                return HandleRequestResult.Fail("No message.");
-            }
-
-            AuthenticationProperties properties = null;
-            try
-            {
-                properties = ReadPropertiesAndClearState(authorizationResponse);
-
-                var messageReceivedContext = await RunMessageReceivedEventAsync(authorizationResponse, properties);
-                if (messageReceivedContext.Result != null)
-                {
-                    return messageReceivedContext.Result;
-                }
-                authorizationResponse = messageReceivedContext.ProtocolMessage;
-                properties = messageReceivedContext.Properties;
-
-                if (properties == null)
-                {
-                    // Fail if state is missing, it's required for the correlation id.
-                    if (string.IsNullOrEmpty(authorizationResponse.State))
-                    {
-                        // This wasn't a valid OIDC message, it may not have been intended for us.
-                        Logger.NullOrEmptyAuthorizationResponseState();
-                        if (Options.SkipUnrecognizedRequests)
-                        {
-                            return HandleRequestResult.SkipHandler();
-                        }
-                        return HandleRequestResult.Fail(Resources.MessageStateIsNullOrEmpty);
-                    }
-
-                    properties = ReadPropertiesAndClearState(authorizationResponse);
-                }
-
-                if (properties == null)
-                {
-                    Logger.UnableToReadAuthorizationResponseState();
-                    if (Options.SkipUnrecognizedRequests)
-                    {
-                        // Not for us?
-                        return HandleRequestResult.SkipHandler();
-                    }
-
-                    // if state exists and we failed to 'unprotect' this is not a message we should process.
-                    return HandleRequestResult.Fail(Resources.MessageStateIsInvalid);
-                }
-
-                if (!ValidateCorrelationId(properties))
-                {
-                    return HandleRequestResult.Fail("Correlation failed.", properties);
-                }
-
-                // if any of the error fields are set, throw error null
-                if (!string.IsNullOrEmpty(authorizationResponse.Error))
-                {
-                    // Note: access_denied errors are special protocol errors indicating the user didn't
-                    // approve the authorization demand requested by the remote authorization server.
-                    // Since it's a frequent scenario (that is not caused by incorrect configuration),
-                    // denied errors are handled differently using HandleAccessDeniedErrorAsync().
-                    // Visit https://tools.ietf.org/html/rfc6749#section-4.1.2.1 for more information.
-                    if (string.Equals(authorizationResponse.Error, "access_denied", StringComparison.Ordinal))
-                    {
-                        return await HandleAccessDeniedErrorAsync(properties);
-                    }
-
-                    return HandleRequestResult.Fail(CreateOpenIdConnectProtocolException(authorizationResponse, response: null), properties);
-                }
-
-                if (_configuration == null && Options.ConfigurationManager != null)
-                {
-                    Logger.UpdatingConfiguration();
-                    _configuration = await Options.ConfigurationManager.GetConfigurationAsync(Context.RequestAborted);
-                }
-
-                PopulateSessionProperties(authorizationResponse, properties);
-
-                ClaimsPrincipal user = null;
-                JwtSecurityToken jwt = null;
-                string nonce = null;
-                var validationParameters = Options.TokenValidationParameters.Clone();
-
-                // Hybrid or Implicit flow
-                if (!string.IsNullOrEmpty(authorizationResponse.IdToken))
-                {
-                    Logger.ReceivedIdToken();
-                    user = ValidateToken(authorizationResponse.IdToken, properties, validationParameters, out jwt);
-
-                    nonce = jwt.Payload.Nonce;
-                    if (!string.IsNullOrEmpty(nonce))
-                    {
-                        nonce = ReadNonceCookie(nonce);
-                    }
-
-                    var tokenValidatedContext = await RunTokenValidatedEventAsync(authorizationResponse, null, user, properties, jwt, nonce);
-                    if (tokenValidatedContext.Result != null)
-                    {
-                        return tokenValidatedContext.Result;
-                    }
-                    authorizationResponse = tokenValidatedContext.ProtocolMessage;
-                    user = tokenValidatedContext.Principal;
-                    properties = tokenValidatedContext.Properties;
-                    jwt = tokenValidatedContext.SecurityToken;
-                    nonce = tokenValidatedContext.Nonce;
-                }
-
-                Options.ProtocolValidator.ValidateAuthenticationResponse(new OpenIdConnectProtocolValidationContext()
-                {
-                    ClientId = Options.ClientId,
-                    ProtocolMessage = authorizationResponse,
-                    ValidatedIdToken = jwt,
-                    Nonce = nonce
-                });
-
-                OpenIdConnectMessage tokenEndpointResponse = null;
-
-                // Authorization Code or Hybrid flow
-                if (!string.IsNullOrEmpty(authorizationResponse.Code))
-                {
-                    var authorizationCodeReceivedContext = await RunAuthorizationCodeReceivedEventAsync(authorizationResponse, user, properties, jwt);
-                    if (authorizationCodeReceivedContext.Result != null)
-                    {
-                        return authorizationCodeReceivedContext.Result;
-                    }
-                    authorizationResponse = authorizationCodeReceivedContext.ProtocolMessage;
-                    user = authorizationCodeReceivedContext.Principal;
-                    properties = authorizationCodeReceivedContext.Properties;
-                    var tokenEndpointRequest = authorizationCodeReceivedContext.TokenEndpointRequest;
-                    // If the developer redeemed the code themselves...
-                    tokenEndpointResponse = authorizationCodeReceivedContext.TokenEndpointResponse;
-                    jwt = authorizationCodeReceivedContext.JwtSecurityToken;
-
-                    if (!authorizationCodeReceivedContext.HandledCodeRedemption)
-                    {
-                        tokenEndpointResponse = await RedeemAuthorizationCodeAsync(tokenEndpointRequest);
-                    }
-
-                    var tokenResponseReceivedContext = await RunTokenResponseReceivedEventAsync(authorizationResponse, tokenEndpointResponse, user, properties);
-                    if (tokenResponseReceivedContext.Result != null)
-                    {
-                        return tokenResponseReceivedContext.Result;
-                    }
-
-                    authorizationResponse = tokenResponseReceivedContext.ProtocolMessage;
-                    tokenEndpointResponse = tokenResponseReceivedContext.TokenEndpointResponse;
-                    user = tokenResponseReceivedContext.Principal;
-                    properties = tokenResponseReceivedContext.Properties;
-
-                    // no need to validate signature when token is received using "code flow" as per spec
-                    // [http://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation].
-                    validationParameters.RequireSignedTokens = false;
-
-                    // At least a cursory validation is required on the new IdToken, even if we've already validated the one from the authorization response.
-                    // And we'll want to validate the new JWT in ValidateTokenResponse.
-                    var tokenEndpointUser = ValidateToken(tokenEndpointResponse.IdToken, properties, validationParameters, out var tokenEndpointJwt);
-
-                    // Avoid reading & deleting the nonce cookie, running the event, etc, if it was already done as part of the authorization response validation.
-                    if (user == null)
-                    {
-                        nonce = tokenEndpointJwt.Payload.Nonce;
-                        if (!string.IsNullOrEmpty(nonce))
-                        {
-                            nonce = ReadNonceCookie(nonce);
-                        }
-
-                        var tokenValidatedContext = await RunTokenValidatedEventAsync(authorizationResponse, tokenEndpointResponse, tokenEndpointUser, properties, tokenEndpointJwt, nonce);
-                        if (tokenValidatedContext.Result != null)
-                        {
-                            return tokenValidatedContext.Result;
-                        }
-                        authorizationResponse = tokenValidatedContext.ProtocolMessage;
-                        tokenEndpointResponse = tokenValidatedContext.TokenEndpointResponse;
-                        user = tokenValidatedContext.Principal;
-                        properties = tokenValidatedContext.Properties;
-                        jwt = tokenValidatedContext.SecurityToken;
-                        nonce = tokenValidatedContext.Nonce;
-                    }
-                    else
-                    {
-                        if (!string.Equals(jwt.Subject, tokenEndpointJwt.Subject, StringComparison.Ordinal))
-                        {
-                            throw new SecurityTokenException("The sub claim does not match in the id_token's from the authorization and token endpoints.");
-                        }
-
-                        jwt = tokenEndpointJwt;
-                    }
-
-                    // Validate the token response if it wasn't provided manually
-                    if (!authorizationCodeReceivedContext.HandledCodeRedemption)
-                    {
-                        Options.ProtocolValidator.ValidateTokenResponse(new OpenIdConnectProtocolValidationContext()
-                        {
-                            ClientId = Options.ClientId,
-                            ProtocolMessage = tokenEndpointResponse,
-                            ValidatedIdToken = jwt,
-                            Nonce = nonce
-                        });
-                    }
-                }
-
-                if (Options.SaveTokens)
-                {
-                    SaveTokens(properties, tokenEndpointResponse ?? authorizationResponse);
-                }
-
-                if (Options.GetClaimsFromUserInfoEndpoint)
-                {
-                    return await GetUserInformationAsync(tokenEndpointResponse ?? authorizationResponse, jwt, user, properties);
-                }
-                else
-                {
-                    var identity = (ClaimsIdentity)user.Identity;
-                    foreach (var action in Options.ClaimActions)
-                    {
-                        action.Run(null, identity, ClaimsIssuer);
-                    }
-                }
-
-                return HandleRequestResult.Success(new AuthenticationTicket(user, properties, Scheme.Name));
-            }
-            catch (Exception exception)
-            {
-                Logger.ExceptionProcessingMessage(exception);
-
-                // Refresh the configuration for exceptions that may be caused by key rollovers. The user can also request a refresh in the event.
-                if (Options.RefreshOnIssuerKeyNotFound && exception is SecurityTokenSignatureKeyNotFoundException)
-                {
-                    if (Options.ConfigurationManager != null)
-                    {
-                        Logger.ConfigurationManagerRequestRefreshCalled();
-                        Options.ConfigurationManager.RequestRefresh();
-                    }
-                }
-
-                var authenticationFailedContext = await RunAuthenticationFailedEventAsync(authorizationResponse, exception);
-                if (authenticationFailedContext.Result != null)
-                {
-                    return authenticationFailedContext.Result;
-                }
-
-                return HandleRequestResult.Fail(exception, properties);
-            }
-        }
-
-        private AuthenticationProperties ReadPropertiesAndClearState(OpenIdConnectMessage message)
-        {
-            AuthenticationProperties properties = null;
-            if (!string.IsNullOrEmpty(message.State))
-            {
-                properties = Options.StateDataFormat.Unprotect(message.State);
-
-                if (properties != null)
-                {
-                    // If properties can be decoded from state, clear the message state.
-                    properties.Items.TryGetValue(OpenIdConnectDefaults.UserstatePropertiesKey, out var userstate);
-                    message.State = userstate;
-                }
-            }
-            return properties;
-        }
-
-        private void PopulateSessionProperties(OpenIdConnectMessage message, AuthenticationProperties properties)
-        {
-            if (!string.IsNullOrEmpty(message.SessionState))
-            {
-                properties.Items[OpenIdConnectSessionProperties.SessionState] = message.SessionState;
-            }
-
-            if (!string.IsNullOrEmpty(_configuration.CheckSessionIframe))
-            {
-                properties.Items[OpenIdConnectSessionProperties.CheckSessionIFrame] = _configuration.CheckSessionIframe;
-            }
-        }
-
-        /// <summary>
-        /// Redeems the authorization code for tokens at the token endpoint.
-        /// </summary>
-        /// <param name="tokenEndpointRequest">The request that will be sent to the token endpoint and is available for customization.</param>
-        /// <returns>OpenIdConnect message that has tokens inside it.</returns>
-        protected virtual async Task<OpenIdConnectMessage> RedeemAuthorizationCodeAsync(OpenIdConnectMessage tokenEndpointRequest)
-        {
-            Logger.RedeemingCodeForTokens();
-
-            var requestMessage = new HttpRequestMessage(HttpMethod.Post, _configuration.TokenEndpoint);
-            requestMessage.Content = new FormUrlEncodedContent(tokenEndpointRequest.Parameters);
-
-            var responseMessage = await Backchannel.SendAsync(requestMessage);
-
-            var contentMediaType = responseMessage.Content.Headers.ContentType?.MediaType;
-            if (string.IsNullOrEmpty(contentMediaType))
-            {
-                Logger.LogDebug($"Unexpected token response format. Status Code: {(int)responseMessage.StatusCode}. Content-Type header is missing.");
-            }
-            else if (!string.Equals(contentMediaType, "application/json", StringComparison.OrdinalIgnoreCase))
-            {
-                Logger.LogDebug($"Unexpected token response format. Status Code: {(int)responseMessage.StatusCode}. Content-Type {responseMessage.Content.Headers.ContentType}.");
-            }
-
-            // Error handling:
-            // 1. If the response body can't be parsed as json, throws.
-            // 2. If the response's status code is not in 2XX range, throw OpenIdConnectProtocolException. If the body is correct parsed,
-            //    pass the error information from body to the exception.
-            OpenIdConnectMessage message;
-            try
-            {
-                var responseContent = await responseMessage.Content.ReadAsStringAsync();
-                message = new OpenIdConnectMessage(responseContent);
-            }
-            catch (Exception ex)
-            {
-                throw new OpenIdConnectProtocolException($"Failed to parse token response body as JSON. Status Code: {(int)responseMessage.StatusCode}. Content-Type: {responseMessage.Content.Headers.ContentType}", ex);
-            }
-
-            if (!responseMessage.IsSuccessStatusCode)
-            {
-                throw CreateOpenIdConnectProtocolException(message, responseMessage);
-            }
-
-            return message;
-        }
-
-        /// <summary>
-        /// Goes to UserInfo endpoint to retrieve additional claims and add any unique claims to the given identity.
-        /// </summary>
-        /// <param name="message">message that is being processed</param>
-        /// <param name="jwt">The <see cref="JwtSecurityToken"/>.</param>
-        /// <param name="principal">The claims principal and identities.</param>
-        /// <param name="properties">The authentication properties.</param>
-        /// <returns><see cref="HandleRequestResult"/> which is used to determine if the remote authentication was successful.</returns>
-        protected virtual async Task<HandleRequestResult> GetUserInformationAsync(
-            OpenIdConnectMessage message, JwtSecurityToken jwt,
-            ClaimsPrincipal principal, AuthenticationProperties properties)
-        {
-            var userInfoEndpoint = _configuration?.UserInfoEndpoint;
-
-            if (string.IsNullOrEmpty(userInfoEndpoint))
-            {
-                Logger.UserInfoEndpointNotSet();
-                return HandleRequestResult.Success(new AuthenticationTicket(principal, properties, Scheme.Name));
-            }
-            if (string.IsNullOrEmpty(message.AccessToken))
-            {
-                Logger.AccessTokenNotAvailable();
-                return HandleRequestResult.Success(new AuthenticationTicket(principal, properties, Scheme.Name));
-            }
-            Logger.RetrievingClaims();
-            var requestMessage = new HttpRequestMessage(HttpMethod.Get, userInfoEndpoint);
-            requestMessage.Headers.Authorization = new AuthenticationHeaderValue("Bearer", message.AccessToken);
-            var responseMessage = await Backchannel.SendAsync(requestMessage);
-            responseMessage.EnsureSuccessStatusCode();
-            var userInfoResponse = await responseMessage.Content.ReadAsStringAsync();
-
-            JObject user;
-            var contentType = responseMessage.Content.Headers.ContentType;
-            if (contentType.MediaType.Equals("application/json", StringComparison.OrdinalIgnoreCase))
-            {
-                user = JObject.Parse(userInfoResponse);
-            }
-            else if (contentType.MediaType.Equals("application/jwt", StringComparison.OrdinalIgnoreCase))
-            {
-                var userInfoEndpointJwt = new JwtSecurityToken(userInfoResponse);
-                user = JObject.FromObject(userInfoEndpointJwt.Payload);
-            }
-            else
-            {
-                return HandleRequestResult.Fail("Unknown response type: " + contentType.MediaType, properties);
-            }
-
-            var userInformationReceivedContext = await RunUserInformationReceivedEventAsync(principal, properties, message, user);
-            if (userInformationReceivedContext.Result != null)
-            {
-                return userInformationReceivedContext.Result;
-            }
-            principal = userInformationReceivedContext.Principal;
-            properties = userInformationReceivedContext.Properties;
-            user = userInformationReceivedContext.User;
-
-            Options.ProtocolValidator.ValidateUserInfoResponse(new OpenIdConnectProtocolValidationContext()
-            {
-                UserInfoEndpointResponse = userInfoResponse,
-                ValidatedIdToken = jwt,
-            });
-
-            var identity = (ClaimsIdentity)principal.Identity;
-
-            foreach (var action in Options.ClaimActions)
-            {
-                action.Run(user, identity, ClaimsIssuer);
-            }
-
-            return HandleRequestResult.Success(new AuthenticationTicket(principal, properties, Scheme.Name));
-        }
-
-        /// <summary>
-        /// Save the tokens contained in the <see cref="OpenIdConnectMessage"/> in the <see cref="ClaimsPrincipal"/>.
-        /// </summary>
-        /// <param name="properties">The <see cref="AuthenticationProperties"/> in which tokens are saved.</param>
-        /// <param name="message">The OpenID Connect response.</param>
-        private void SaveTokens(AuthenticationProperties properties, OpenIdConnectMessage message)
-        {
-            var tokens = new List<AuthenticationToken>();
-
-            if (!string.IsNullOrEmpty(message.AccessToken))
-            {
-                tokens.Add(new AuthenticationToken { Name = OpenIdConnectParameterNames.AccessToken, Value = message.AccessToken });
-            }
-
-            if (!string.IsNullOrEmpty(message.IdToken))
-            {
-                tokens.Add(new AuthenticationToken { Name = OpenIdConnectParameterNames.IdToken, Value = message.IdToken });
-            }
-
-            if (!string.IsNullOrEmpty(message.RefreshToken))
-            {
-                tokens.Add(new AuthenticationToken { Name = OpenIdConnectParameterNames.RefreshToken, Value = message.RefreshToken });
-            }
-
-            if (!string.IsNullOrEmpty(message.TokenType))
-            {
-                tokens.Add(new AuthenticationToken { Name = OpenIdConnectParameterNames.TokenType, Value = message.TokenType });
-            }
-
-            if (!string.IsNullOrEmpty(message.ExpiresIn))
-            {
-                if (int.TryParse(message.ExpiresIn, NumberStyles.Integer, CultureInfo.InvariantCulture, out int value))
-                {
-                    var expiresAt = Clock.UtcNow + TimeSpan.FromSeconds(value);
-                    // https://www.w3.org/TR/xmlschema-2/#dateTime
-                    // https://msdn.microsoft.com/en-us/library/az4se3k1(v=vs.110).aspx
-                    tokens.Add(new AuthenticationToken { Name = "expires_at", Value = expiresAt.ToString("o", CultureInfo.InvariantCulture) });
-                }
-            }
-
-            properties.StoreTokens(tokens);
-        }
-
-        /// <summary>
-        /// Adds the nonce to <see cref="HttpResponse.Cookies"/>.
-        /// </summary>
-        /// <param name="nonce">the nonce to remember.</param>
-        /// <remarks><see cref="M:IResponseCookies.Append"/> of <see cref="HttpResponse.Cookies"/> is called to add a cookie with the name: 'OpenIdConnectAuthenticationDefaults.Nonce + <see cref="M:ISecureDataFormat{TData}.Protect"/>(nonce)' of <see cref="OpenIdConnectOptions.StringDataFormat"/>.
-        /// The value of the cookie is: "N".</remarks>
-        private void WriteNonceCookie(string nonce)
-        {
-            if (string.IsNullOrEmpty(nonce))
-            {
-                throw new ArgumentNullException(nameof(nonce));
-            }
-
-            var cookieOptions = Options.NonceCookie.Build(Context, Clock.UtcNow);
-
-            Response.Cookies.Append(
-                Options.NonceCookie.Name + Options.StringDataFormat.Protect(nonce),
-                NonceProperty,
-                cookieOptions);
-        }
-
-        /// <summary>
-        /// Searches <see cref="HttpRequest.Cookies"/> for a matching nonce.
-        /// </summary>
-        /// <param name="nonce">the nonce that we are looking for.</param>
-        /// <returns>echos 'nonce' if a cookie is found that matches, null otherwise.</returns>
-        /// <remarks>Examine <see cref="IRequestCookieCollection.Keys"/> of <see cref="HttpRequest.Cookies"/> that start with the prefix: 'OpenIdConnectAuthenticationDefaults.Nonce'.
-        /// <see cref="M:ISecureDataFormat{TData}.Unprotect"/> of <see cref="OpenIdConnectOptions.StringDataFormat"/> is used to obtain the actual 'nonce'. If the nonce is found, then <see cref="M:IResponseCookies.Delete"/> of <see cref="HttpResponse.Cookies"/> is called.</remarks>
-        private string ReadNonceCookie(string nonce)
-        {
-            if (nonce == null)
-            {
-                return null;
-            }
-
-            foreach (var nonceKey in Request.Cookies.Keys)
-            {
-                if (nonceKey.StartsWith(Options.NonceCookie.Name))
-                {
-                    try
-                    {
-                        var nonceDecodedValue = Options.StringDataFormat.Unprotect(nonceKey.Substring(Options.NonceCookie.Name.Length, nonceKey.Length - Options.NonceCookie.Name.Length));
-                        if (nonceDecodedValue == nonce)
-                        {
-                            var cookieOptions = Options.NonceCookie.Build(Context, Clock.UtcNow);
-                            Response.Cookies.Delete(nonceKey, cookieOptions);
-                            return nonce;
-                        }
-                    }
-                    catch (Exception ex)
-                    {
-                        Logger.UnableToProtectNonceCookie(ex);
-                    }
-                }
-            }
-
-            return null;
-        }
-
-        private AuthenticationProperties GetPropertiesFromState(string state)
-        {
-            // assume a well formed query string: <a=b&>OpenIdConnectAuthenticationDefaults.AuthenticationPropertiesKey=kasjd;fljasldkjflksdj<&c=d>
-            var startIndex = 0;
-            if (string.IsNullOrEmpty(state) || (startIndex = state.IndexOf(OpenIdConnectDefaults.AuthenticationPropertiesKey, StringComparison.Ordinal)) == -1)
-            {
-                return null;
-            }
-
-            var authenticationIndex = startIndex + OpenIdConnectDefaults.AuthenticationPropertiesKey.Length;
-            if (authenticationIndex == -1 || authenticationIndex == state.Length || state[authenticationIndex] != '=')
-            {
-                return null;
-            }
-
-            // scan rest of string looking for '&'
-            authenticationIndex++;
-            var endIndex = state.Substring(authenticationIndex, state.Length - authenticationIndex).IndexOf("&", StringComparison.Ordinal);
-
-            // -1 => no other parameters are after the AuthenticationPropertiesKey
-            if (endIndex == -1)
-            {
-                return Options.StateDataFormat.Unprotect(Uri.UnescapeDataString(state.Substring(authenticationIndex).Replace('+', ' ')));
-            }
-            else
-            {
-                return Options.StateDataFormat.Unprotect(Uri.UnescapeDataString(state.Substring(authenticationIndex, endIndex).Replace('+', ' ')));
-            }
-        }
-
-        private async Task<MessageReceivedContext> RunMessageReceivedEventAsync(OpenIdConnectMessage message, AuthenticationProperties properties)
-        {
-            Logger.MessageReceived(message.BuildRedirectUrl());
-            var context = new MessageReceivedContext(Context, Scheme, Options, properties)
-            {
-                ProtocolMessage = message,
-            };
-
-            await Events.MessageReceived(context);
-            if (context.Result != null)
-            {
-                if (context.Result.Handled)
-                {
-                    Logger.MessageReceivedContextHandledResponse();
-                }
-                else if (context.Result.Skipped)
-                {
-                    Logger.MessageReceivedContextSkipped();
-                }
-            }
-
-            return context;
-        }
-
-        private async Task<TokenValidatedContext> RunTokenValidatedEventAsync(OpenIdConnectMessage authorizationResponse, OpenIdConnectMessage tokenEndpointResponse, ClaimsPrincipal user, AuthenticationProperties properties, JwtSecurityToken jwt, string nonce)
-        {
-            var context = new TokenValidatedContext(Context, Scheme, Options, user, properties)
-            {
-                ProtocolMessage = authorizationResponse,
-                TokenEndpointResponse = tokenEndpointResponse,
-                SecurityToken = jwt,
-                Nonce = nonce,
-            };
-
-            await Events.TokenValidated(context);
-            if (context.Result != null)
-            {
-                if (context.Result.Handled)
-                {
-                    Logger.TokenValidatedHandledResponse();
-                }
-                else if (context.Result.Skipped)
-                {
-                    Logger.TokenValidatedSkipped();
-                }
-            }
-
-            return context;
-        }
-
-        private async Task<AuthorizationCodeReceivedContext> RunAuthorizationCodeReceivedEventAsync(OpenIdConnectMessage authorizationResponse, ClaimsPrincipal user, AuthenticationProperties properties, JwtSecurityToken jwt)
-        {
-            Logger.AuthorizationCodeReceived();
-
-            var tokenEndpointRequest = new OpenIdConnectMessage()
-            {
-                ClientId = Options.ClientId,
-                ClientSecret = Options.ClientSecret,
-                Code = authorizationResponse.Code,
-                GrantType = OpenIdConnectGrantTypes.AuthorizationCode,
-                EnableTelemetryParameters = !Options.DisableTelemetry,
-                RedirectUri = properties.Items[OpenIdConnectDefaults.RedirectUriForCodePropertiesKey]
-            };
-
-            var context = new AuthorizationCodeReceivedContext(Context, Scheme, Options, properties)
-            {
-                ProtocolMessage = authorizationResponse,
-                TokenEndpointRequest = tokenEndpointRequest,
-                Principal = user,
-                JwtSecurityToken = jwt,
-                Backchannel = Backchannel
-            };
-
-            await Events.AuthorizationCodeReceived(context);
-            if (context.Result != null)
-            {
-                if (context.Result.Handled)
-                {
-                    Logger.AuthorizationCodeReceivedContextHandledResponse();
-                }
-                else if (context.Result.Skipped)
-                {
-                    Logger.AuthorizationCodeReceivedContextSkipped();
-                }
-            }
-
-            return context;
-        }
-
-        private async Task<TokenResponseReceivedContext> RunTokenResponseReceivedEventAsync(
-            OpenIdConnectMessage message,
-            OpenIdConnectMessage tokenEndpointResponse,
-            ClaimsPrincipal user,
-            AuthenticationProperties properties)
-        {
-            Logger.TokenResponseReceived();
-            var context = new TokenResponseReceivedContext(Context, Scheme, Options, user, properties)
-            {
-                ProtocolMessage = message,
-                TokenEndpointResponse = tokenEndpointResponse,
-            };
-
-            await Events.TokenResponseReceived(context);
-            if (context.Result != null)
-            {
-                if (context.Result.Handled)
-                {
-                    Logger.TokenResponseReceivedHandledResponse();
-                }
-                else if (context.Result.Skipped)
-                {
-                    Logger.TokenResponseReceivedSkipped();
-                }
-            }
-
-            return context;
-        }
-
-        private async Task<UserInformationReceivedContext> RunUserInformationReceivedEventAsync(ClaimsPrincipal principal, AuthenticationProperties properties, OpenIdConnectMessage message, JObject user)
-        {
-            Logger.UserInformationReceived(user.ToString());
-
-            var context = new UserInformationReceivedContext(Context, Scheme, Options, principal, properties)
-            {
-                ProtocolMessage = message,
-                User = user,
-            };
-
-            await Events.UserInformationReceived(context);
-            if (context.Result != null)
-            {
-                if (context.Result.Handled)
-                {
-                    Logger.UserInformationReceivedHandledResponse();
-                }
-                else if (context.Result.Skipped)
-                {
-                    Logger.UserInformationReceivedSkipped();
-                }
-            }
-
-            return context;
-        }
-
-        private async Task<AuthenticationFailedContext> RunAuthenticationFailedEventAsync(OpenIdConnectMessage message, Exception exception)
-        {
-            var context = new AuthenticationFailedContext(Context, Scheme, Options)
-            {
-                ProtocolMessage = message,
-                Exception = exception
-            };
-
-            await Events.AuthenticationFailed(context);
-            if (context.Result != null)
-            {
-                if (context.Result.Handled)
-                {
-                    Logger.AuthenticationFailedContextHandledResponse();
-                }
-                else if (context.Result.Skipped)
-                {
-                    Logger.AuthenticationFailedContextSkipped();
-                }
-            }
-
-            return context;
-        }
-
-        // Note this modifies properties if Options.UseTokenLifetime
-        private ClaimsPrincipal ValidateToken(string idToken, AuthenticationProperties properties, TokenValidationParameters validationParameters, out JwtSecurityToken jwt)
-        {
-            if (!Options.SecurityTokenValidator.CanReadToken(idToken))
-            {
-                Logger.UnableToReadIdToken(idToken);
-                throw new SecurityTokenException(string.Format(CultureInfo.InvariantCulture, Resources.UnableToValidateToken, idToken));
-            }
-
-            if (_configuration != null)
-            {
-                var issuer = new[] { _configuration.Issuer };
-                validationParameters.ValidIssuers = validationParameters.ValidIssuers?.Concat(issuer) ?? issuer;
-
-                validationParameters.IssuerSigningKeys = validationParameters.IssuerSigningKeys?.Concat(_configuration.SigningKeys)
-                    ?? _configuration.SigningKeys;
-            }
-
-            var principal = Options.SecurityTokenValidator.ValidateToken(idToken, validationParameters, out SecurityToken validatedToken);
-            jwt = validatedToken as JwtSecurityToken;
-            if (jwt == null)
-            {
-                Logger.InvalidSecurityTokenType(validatedToken?.GetType().ToString());
-                throw new SecurityTokenException(string.Format(CultureInfo.InvariantCulture, Resources.ValidatedSecurityTokenNotJwt, validatedToken?.GetType()));
-            }
-
-            if (validatedToken == null)
-            {
-                Logger.UnableToValidateIdToken(idToken);
-                throw new SecurityTokenException(string.Format(CultureInfo.InvariantCulture, Resources.UnableToValidateToken, idToken));
-            }
-
-            if (Options.UseTokenLifetime)
-            {
-                var issued = validatedToken.ValidFrom;
-                if (issued != DateTime.MinValue)
-                {
-                    properties.IssuedUtc = issued;
-                }
-
-                var expires = validatedToken.ValidTo;
-                if (expires != DateTime.MinValue)
-                {
-                    properties.ExpiresUtc = expires;
-                }
-            }
-
-            return principal;
-        }
-
-        /// <summary>
-        /// Build a redirect path if the given path is a relative path.
-        /// </summary>
-        private string BuildRedirectUriIfRelative(string uri)
-        {
-            if (string.IsNullOrEmpty(uri))
-            {
-                return uri;
-            }
-
-            if (!uri.StartsWith("/", StringComparison.Ordinal))
-            {
-                return uri;
-            }
-
-            return BuildRedirectUri(uri);
-        }
-
-        private OpenIdConnectProtocolException CreateOpenIdConnectProtocolException(OpenIdConnectMessage message, HttpResponseMessage response)
-        {
-            var description = message.ErrorDescription ?? "error_description is null";
-            var errorUri = message.ErrorUri ?? "error_uri is null";
-
-            if (response != null)
-            {
-                Logger.ResponseErrorWithStatusCode(message.Error, description, errorUri, (int)response.StatusCode);
-            }
-            else
-            {
-                Logger.ResponseError(message.Error, description, errorUri);
-            }
-
-            return new OpenIdConnectProtocolException(string.Format(
-                CultureInfo.InvariantCulture,
-                Resources.MessageContainsError,
-                message.Error,
-                description,
-                errorUri));
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectOptions.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectOptions.cs
deleted file mode 100644
index cbf6e8eab..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectOptions.cs
+++ /dev/null
@@ -1,326 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.IdentityModel.Tokens.Jwt;
-using Microsoft.AspNetCore.Authentication.Internal;
-using Microsoft.AspNetCore.Authentication.OAuth.Claims;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Microsoft.IdentityModel.Tokens;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// Configuration options for <see cref="OpenIdConnectHandler"/>
-    /// </summary>
-    public class OpenIdConnectOptions : RemoteAuthenticationOptions
-    {
-        private CookieBuilder _nonceCookieBuilder;
-
-        /// <summary>
-        /// Initializes a new <see cref="OpenIdConnectOptions"/>
-        /// </summary>
-        /// <remarks>
-        /// Defaults:
-        /// <para>AddNonceToRequest: true.</para>
-        /// <para>BackchannelTimeout: 1 minute.</para>
-        /// <para>ProtocolValidator: new <see cref="OpenIdConnectProtocolValidator"/>.</para>
-        /// <para>RefreshOnIssuerKeyNotFound: true</para>
-        /// <para>ResponseType: <see cref="OpenIdConnectResponseType.CodeIdToken"/></para>
-        /// <para>Scope: <see cref="OpenIdConnectScope.OpenIdProfile"/>.</para>
-        /// <para>TokenValidationParameters: new <see cref="TokenValidationParameters"/> with AuthenticationScheme = authenticationScheme.</para>
-        /// <para>UseTokenLifetime: false.</para>
-        /// </remarks>
-        public OpenIdConnectOptions()
-        {
-            CallbackPath = new PathString("/signin-oidc");
-            SignedOutCallbackPath = new PathString("/signout-callback-oidc");
-            RemoteSignOutPath = new PathString("/signout-oidc");
-
-            Events = new OpenIdConnectEvents();
-            Scope.Add("openid");
-            Scope.Add("profile");
-
-            ClaimActions.DeleteClaim("nonce");
-            ClaimActions.DeleteClaim("aud");
-            ClaimActions.DeleteClaim("azp");
-            ClaimActions.DeleteClaim("acr");
-            ClaimActions.DeleteClaim("amr");
-            ClaimActions.DeleteClaim("iss");
-            ClaimActions.DeleteClaim("iat");
-            ClaimActions.DeleteClaim("nbf");
-            ClaimActions.DeleteClaim("exp");
-            ClaimActions.DeleteClaim("at_hash");
-            ClaimActions.DeleteClaim("c_hash");
-            ClaimActions.DeleteClaim("auth_time");
-            ClaimActions.DeleteClaim("ipaddr");
-            ClaimActions.DeleteClaim("platf");
-            ClaimActions.DeleteClaim("ver");
-
-            // http://openid.net/specs/openid-connect-core-1_0.html#StandardClaims
-            ClaimActions.MapUniqueJsonKey("sub", "sub");
-            ClaimActions.MapUniqueJsonKey("name", "name");
-            ClaimActions.MapUniqueJsonKey("given_name", "given_name");
-            ClaimActions.MapUniqueJsonKey("family_name", "family_name");
-            ClaimActions.MapUniqueJsonKey("profile", "profile");
-            ClaimActions.MapUniqueJsonKey("email", "email");
-
-            _nonceCookieBuilder = new OpenIdConnectNonceCookieBuilder(this)
-            {
-                Name = OpenIdConnectDefaults.CookieNoncePrefix,
-                HttpOnly = true,
-                SameSite = SameSiteMode.None,
-                SecurePolicy = CookieSecurePolicy.SameAsRequest,
-                IsEssential = true,
-            };
-        }
-
-        /// <summary>
-        /// Check that the options are valid.  Should throw an exception if things are not ok.
-        /// </summary>
-        public override void Validate()
-        {
-            base.Validate();
-
-            if (MaxAge.HasValue && MaxAge.Value < TimeSpan.Zero)
-            {
-                throw new ArgumentOutOfRangeException(nameof(MaxAge), MaxAge.Value, "The value must not be a negative TimeSpan.");
-            }
-
-            if (string.IsNullOrEmpty(ClientId))
-            {
-                throw new ArgumentException("Options.ClientId must be provided", nameof(ClientId));
-            }
-
-            if (!CallbackPath.HasValue)
-            {
-                throw new ArgumentException("Options.CallbackPath must be provided.", nameof(CallbackPath));
-            }
-
-            if (ConfigurationManager == null)
-            {
-                throw new InvalidOperationException($"Provide {nameof(Authority)}, {nameof(MetadataAddress)}, "
-                + $"{nameof(Configuration)}, or {nameof(ConfigurationManager)} to {nameof(OpenIdConnectOptions)}");
-            }
-        }
-
-        /// <summary>
-        /// Gets or sets the Authority to use when making OpenIdConnect calls.
-        /// </summary>
-        public string Authority { get; set; }
-
-        /// <summary>
-        /// Gets or sets the 'client_id'.
-        /// </summary>
-        public string ClientId { get; set; }
-
-        /// <summary>
-        /// Gets or sets the 'client_secret'.
-        /// </summary>
-        public string ClientSecret { get; set; }
-
-        /// <summary>
-        /// Configuration provided directly by the developer. If provided, then MetadataAddress and the Backchannel properties
-        /// will not be used. This information should not be updated during request processing.
-        /// </summary>
-        public OpenIdConnectConfiguration Configuration { get; set; }
-
-        /// <summary>
-        /// Responsible for retrieving, caching, and refreshing the configuration from metadata.
-        /// If not provided, then one will be created using the MetadataAddress and Backchannel properties.
-        /// </summary>
-        public IConfigurationManager<OpenIdConnectConfiguration> ConfigurationManager { get; set; }
-
-        /// <summary>
-        /// Boolean to set whether the handler should go to user info endpoint to retrieve additional claims or not after creating an identity from id_token received from token endpoint.
-        /// The default is 'false'.
-        /// </summary>
-        public bool GetClaimsFromUserInfoEndpoint { get; set; }
-
-        /// <summary>
-        /// A collection of claim actions used to select values from the json user data and create Claims.
-        /// </summary>
-        public ClaimActionCollection ClaimActions { get; } = new ClaimActionCollection();
-
-        /// <summary>
-        /// Gets or sets if HTTPS is required for the metadata address or authority.
-        /// The default is true. This should be disabled only in development environments.
-        /// </summary>
-        public bool RequireHttpsMetadata { get; set; } = true;
-
-        /// <summary>
-        /// Gets or sets the discovery endpoint for obtaining metadata
-        /// </summary>
-        public string MetadataAddress { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="OpenIdConnectEvents"/> to notify when processing OpenIdConnect messages.
-        /// </summary>
-        public new OpenIdConnectEvents Events
-        {
-            get => (OpenIdConnectEvents)base.Events;
-            set => base.Events = value;
-        }
-
-        /// <summary>
-        /// Gets or sets the 'max_age'. If set the 'max_age' parameter will be sent with the authentication request. If the identity
-        /// provider has not actively authenticated the user within the length of time specified, the user will be prompted to
-        /// re-authenticate. By default no max_age is specified.
-        /// </summary>
-        public TimeSpan? MaxAge { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="OpenIdConnectProtocolValidator"/> that is used to ensure that the 'id_token' received
-        /// is valid per: http://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation
-        /// </summary>
-        /// <exception cref="ArgumentNullException">if 'value' is null.</exception>
-        public OpenIdConnectProtocolValidator ProtocolValidator { get; set; } = new OpenIdConnectProtocolValidator()
-        {
-            RequireStateValidation = false,
-            NonceLifetime = TimeSpan.FromMinutes(15)
-        };
-
-        /// <summary>
-        /// The request path within the application's base path where the user agent will be returned after sign out from the identity provider.
-        /// See post_logout_redirect_uri from http://openid.net/specs/openid-connect-session-1_0.html#RedirectionAfterLogout.
-        /// </summary>
-        public PathString SignedOutCallbackPath { get; set; }
-
-        /// <summary>
-        /// The uri where the user agent will be redirected to after application is signed out from the identity provider.
-        /// The redirect will happen after the SignedOutCallbackPath is invoked.
-        /// </summary>
-        /// <remarks>This URI can be out of the application's domain. By default it points to the root.</remarks>
-        public string SignedOutRedirectUri { get; set; } = "/";
-
-        /// <summary>
-        /// Gets or sets if a metadata refresh should be attempted after a SecurityTokenSignatureKeyNotFoundException. This allows for automatic
-        /// recovery in the event of a signature key rollover. This is enabled by default.
-        /// </summary>
-        public bool RefreshOnIssuerKeyNotFound { get; set; } = true;
-
-        /// <summary>
-        /// Gets or sets the method used to redirect the user agent to the identity provider.
-        /// </summary>
-        public OpenIdConnectRedirectBehavior AuthenticationMethod { get; set; } = OpenIdConnectRedirectBehavior.RedirectGet;
-
-        /// <summary>
-        /// Gets or sets the 'resource'.
-        /// </summary>
-        public string Resource { get; set; }
-
-        /// <summary>
-        /// Gets or sets the 'response_mode'.
-        /// </summary>
-        public string ResponseMode { get; set; } = OpenIdConnectResponseMode.FormPost;
-
-        /// <summary>
-        /// Gets or sets the 'response_type'.
-        /// </summary>
-        public string ResponseType { get; set; } = OpenIdConnectResponseType.IdToken;
-
-        /// <summary>
-        /// Gets or sets the 'prompt'.
-        /// </summary>
-        public string Prompt { get; set; }
-
-        /// <summary>
-        /// Gets the list of permissions to request.
-        /// </summary>
-        public ICollection<string> Scope { get; } = new HashSet<string>();
-
-        /// <summary>
-        /// Requests received on this path will cause the handler to invoke SignOut using the SignInScheme.
-        /// </summary>
-        public PathString RemoteSignOutPath { get; set; }
-
-        /// <summary>
-        /// The Authentication Scheme to use with SignOut on the SignOutPath. SignInScheme will be used if this
-        /// is not set.
-        /// </summary>
-        public string SignOutScheme { get; set; }
-
-        /// <summary>
-        /// Gets or sets the type used to secure data handled by the handler.
-        /// </summary>
-        public ISecureDataFormat<AuthenticationProperties> StateDataFormat { get; set; }
-
-        /// <summary>
-        /// Gets or sets the type used to secure strings used by the handler.
-        /// </summary>
-        public ISecureDataFormat<string> StringDataFormat { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="ISecurityTokenValidator"/> used to validate identity tokens.
-        /// </summary>
-        public ISecurityTokenValidator SecurityTokenValidator { get; set; } = new JwtSecurityTokenHandler();
-
-        /// <summary>
-        /// Gets or sets the parameters used to validate identity tokens.
-        /// </summary>
-        /// <remarks>Contains the types and definitions required for validating a token.</remarks>
-        public TokenValidationParameters TokenValidationParameters { get; set; } = new TokenValidationParameters();
-
-        /// <summary>
-        /// Indicates that the authentication session lifetime (e.g. cookies) should match that of the authentication token.
-        /// If the token does not provide lifetime information then normal session lifetimes will be used.
-        /// This is disabled by default.
-        /// </summary>
-        public bool UseTokenLifetime { get; set; }
-
-        /// <summary>
-        /// Indicates if requests to the CallbackPath may also be for other components. If enabled the handler will pass
-        /// requests through that do not contain OpenIdConnect authentication responses. Disabling this and setting the
-        /// CallbackPath to a dedicated endpoint may provide better error handling.
-        /// This is disabled by default.
-        /// </summary>
-        public bool SkipUnrecognizedRequests { get; set; } = false;
-
-        /// <summary>
-        /// Indicates whether telemetry should be disabled. When this feature is enabled,
-        /// the assembly version of the Microsoft IdentityModel packages is sent to the
-        /// remote OpenID Connect provider as an authorization/logout request parameter.
-        /// </summary>
-        public bool DisableTelemetry { get; set; }
-
-        /// <summary>
-        /// Determines the settings used to create the nonce cookie before the
-        /// cookie gets added to the response.
-        /// </summary>
-        /// <remarks>
-        /// The value of <see cref="CookieBuilder.Name"/> is treated as the prefix to the cookie name, and defaults to <seealso cref="OpenIdConnectDefaults.CookieNoncePrefix"/>.
-        /// </remarks>
-        public CookieBuilder NonceCookie
-        {
-            get => _nonceCookieBuilder;
-            set => _nonceCookieBuilder = value ?? throw new ArgumentNullException(nameof(value));
-        }
-
-        private class OpenIdConnectNonceCookieBuilder : RequestPathBaseCookieBuilder
-        {
-            private readonly OpenIdConnectOptions _options;
-
-            public OpenIdConnectNonceCookieBuilder(OpenIdConnectOptions oidcOptions)
-            {
-                _options = oidcOptions;
-            }
-
-            protected override string AdditionalPath => _options.CallbackPath;
-
-            public override CookieOptions Build(HttpContext context, DateTimeOffset expiresFrom)
-            {
-                var cookieOptions = base.Build(context, expiresFrom);
-
-                if (!Expiration.HasValue || !cookieOptions.Expires.HasValue)
-                {
-                    cookieOptions.Expires = expiresFrom.Add(_options.ProtocolValidator.NonceLifetime);
-                }
-
-                return cookieOptions;
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectPostConfigureOptions.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectPostConfigureOptions.cs
deleted file mode 100644
index b79f1d1ed..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectPostConfigureOptions.cs
+++ /dev/null
@@ -1,114 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Net.Http;
-using System.Text;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.Extensions.Options;
-using Microsoft.IdentityModel.Protocols;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// Used to setup defaults for all <see cref="OpenIdConnectOptions"/>.
-    /// </summary>
-    public class OpenIdConnectPostConfigureOptions : IPostConfigureOptions<OpenIdConnectOptions>
-    {
-        private readonly IDataProtectionProvider _dp;
-
-        public OpenIdConnectPostConfigureOptions(IDataProtectionProvider dataProtection)
-        {
-            _dp = dataProtection;
-        }
-
-        /// <summary>
-        /// Invoked to post configure a TOptions instance.
-        /// </summary>
-        /// <param name="name">The name of the options instance being configured.</param>
-        /// <param name="options">The options instance to configure.</param>
-        public void PostConfigure(string name, OpenIdConnectOptions options)
-        {
-            options.DataProtectionProvider = options.DataProtectionProvider ?? _dp;
-
-            if (string.IsNullOrEmpty(options.SignOutScheme))
-            {
-                options.SignOutScheme = options.SignInScheme;
-            }
-
-            if (options.StateDataFormat == null)
-            {
-                var dataProtector = options.DataProtectionProvider.CreateProtector(
-                    typeof(OpenIdConnectHandler).FullName, name, "v1");
-                options.StateDataFormat = new PropertiesDataFormat(dataProtector);
-            }
-
-            if (options.StringDataFormat == null)
-            {
-                var dataProtector = options.DataProtectionProvider.CreateProtector(
-                    typeof(OpenIdConnectHandler).FullName,
-                    typeof(string).FullName,
-                    name,
-                    "v1");
-
-                options.StringDataFormat = new SecureDataFormat<string>(new StringSerializer(), dataProtector);
-            }
-
-            if (string.IsNullOrEmpty(options.TokenValidationParameters.ValidAudience) && !string.IsNullOrEmpty(options.ClientId))
-            {
-                options.TokenValidationParameters.ValidAudience = options.ClientId;
-            }
-
-            if (options.Backchannel == null)
-            {
-                options.Backchannel = new HttpClient(options.BackchannelHttpHandler ?? new HttpClientHandler());
-                options.Backchannel.DefaultRequestHeaders.UserAgent.ParseAdd("Microsoft ASP.NET Core OpenIdConnect handler");
-                options.Backchannel.Timeout = options.BackchannelTimeout;
-                options.Backchannel.MaxResponseContentBufferSize = 1024 * 1024 * 10; // 10 MB
-            }
-
-            if (options.ConfigurationManager == null)
-            {
-                if (options.Configuration != null)
-                {
-                    options.ConfigurationManager = new StaticConfigurationManager<OpenIdConnectConfiguration>(options.Configuration);
-                }
-                else if (!(string.IsNullOrEmpty(options.MetadataAddress) && string.IsNullOrEmpty(options.Authority)))
-                {
-                    if (string.IsNullOrEmpty(options.MetadataAddress) && !string.IsNullOrEmpty(options.Authority))
-                    {
-                        options.MetadataAddress = options.Authority;
-                        if (!options.MetadataAddress.EndsWith("/", StringComparison.Ordinal))
-                        {
-                            options.MetadataAddress += "/";
-                        }
-
-                        options.MetadataAddress += ".well-known/openid-configuration";
-                    }
-
-                    if (options.RequireHttpsMetadata && !options.MetadataAddress.StartsWith("https://", StringComparison.OrdinalIgnoreCase))
-                    {
-                        throw new InvalidOperationException("The MetadataAddress or Authority must use HTTPS unless disabled for development by setting RequireHttpsMetadata=false.");
-                    }
-
-                    options.ConfigurationManager = new ConfigurationManager<OpenIdConnectConfiguration>(options.MetadataAddress, new OpenIdConnectConfigurationRetriever(),
-                        new HttpDocumentRetriever(options.Backchannel) { RequireHttps = options.RequireHttpsMetadata });
-                }
-            }
-        }
-
-        private class StringSerializer : IDataSerializer<string>
-        {
-            public string Deserialize(byte[] data)
-            {
-                return Encoding.UTF8.GetString(data);
-            }
-
-            public byte[] Serialize(string model)
-            {
-                return Encoding.UTF8.GetBytes(model);
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectRedirectBehavior.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectRedirectBehavior.cs
deleted file mode 100644
index 2f419df18..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/OpenIdConnectRedirectBehavior.cs
+++ /dev/null
@@ -1,21 +0,0 @@
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    /// <summary>
-    /// Lists the different authentication methods used to
-    /// redirect the user agent to the identity provider.
-    /// </summary>
-    public enum OpenIdConnectRedirectBehavior
-    {
-        /// <summary>
-        /// Emits a 302 response to redirect the user agent to
-        /// the OpenID Connect provider using a GET request.
-        /// </summary>
-        RedirectGet = 0,
-
-        /// <summary>
-        /// Emits an HTML form to redirect the user agent to
-        /// the OpenID Connect provider using a POST request.
-        /// </summary>
-        FormPost = 1
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Properties/Resources.Designer.cs
deleted file mode 100644
index 753373ece..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,114 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication.OpenIdConnect
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.OpenIdConnect.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// OpenIdConnectAuthenticationHandler: message.State is null or empty.
-        /// </summary>
-        internal static string MessageStateIsNullOrEmpty
-        {
-            get => GetString("MessageStateIsNullOrEmpty");
-        }
-
-        /// <summary>
-        /// OpenIdConnectAuthenticationHandler: message.State is null or empty.
-        /// </summary>
-        internal static string FormatMessageStateIsNullOrEmpty()
-            => GetString("MessageStateIsNullOrEmpty");
-
-        /// <summary>
-        /// Unable to unprotect the message.State.
-        /// </summary>
-        internal static string MessageStateIsInvalid
-        {
-            get => GetString("MessageStateIsInvalid");
-        }
-
-        /// <summary>
-        /// Unable to unprotect the message.State.
-        /// </summary>
-        internal static string FormatMessageStateIsInvalid()
-            => GetString("MessageStateIsInvalid");
-
-        /// <summary>
-        /// Message contains error: '{0}', error_description: '{1}', error_uri: '{2}'.
-        /// </summary>
-        internal static string MessageContainsError
-        {
-            get => GetString("MessageContainsError");
-        }
-
-        /// <summary>
-        /// Message contains error: '{0}', error_description: '{1}', error_uri: '{2}'.
-        /// </summary>
-        internal static string FormatMessageContainsError(object p0, object p1, object p2)
-            => string.Format(CultureInfo.CurrentCulture, GetString("MessageContainsError"), p0, p1, p2);
-
-        /// <summary>
-        /// The Validated Security Token must be of type JwtSecurityToken, but instead its type is: '{0}'.
-        /// </summary>
-        internal static string ValidatedSecurityTokenNotJwt
-        {
-            get => GetString("ValidatedSecurityTokenNotJwt");
-        }
-
-        /// <summary>
-        /// The Validated Security Token must be of type JwtSecurityToken, but instead its type is: '{0}'.
-        /// </summary>
-        internal static string FormatValidatedSecurityTokenNotJwt(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("ValidatedSecurityTokenNotJwt"), p0);
-
-        /// <summary>
-        /// Unable to validate the 'id_token', no suitable ISecurityTokenValidator was found for: '{0}'."
-        /// </summary>
-        internal static string UnableToValidateToken
-        {
-            get => GetString("UnableToValidateToken");
-        }
-
-        /// <summary>
-        /// Unable to validate the 'id_token', no suitable ISecurityTokenValidator was found for: '{0}'."
-        /// </summary>
-        internal static string FormatUnableToValidateToken(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("UnableToValidateToken"), p0);
-
-        /// <summary>
-        /// Cannot process the message. Both id_token and code are missing.
-        /// </summary>
-        internal static string IdTokenCodeMissing
-        {
-            get => GetString("IdTokenCodeMissing");
-        }
-
-        /// <summary>
-        /// Cannot process the message. Both id_token and code are missing.
-        /// </summary>
-        internal static string FormatIdTokenCodeMissing()
-            => GetString("IdTokenCodeMissing");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Resources.resx b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Resources.resx
deleted file mode 100644
index 7f790fef4..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/Resources.resx
+++ /dev/null
@@ -1,138 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="MessageStateIsNullOrEmpty" xml:space="preserve">
-    <value>OpenIdConnectAuthenticationHandler: message.State is null or empty.</value>
-  </data>
-  <data name="MessageStateIsInvalid" xml:space="preserve">
-    <value>Unable to unprotect the message.State.</value>
-  </data>
-  <data name="MessageContainsError" xml:space="preserve">
-    <value>Message contains error: '{0}', error_description: '{1}', error_uri: '{2}'.</value>
-  </data>
-  <data name="ValidatedSecurityTokenNotJwt" xml:space="preserve">
-    <value>The Validated Security Token must be of type JwtSecurityToken, but instead its type is: '{0}'.</value>
-  </data>
-  <data name="UnableToValidateToken" xml:space="preserve">
-    <value>Unable to validate the 'id_token', no suitable ISecurityTokenValidator was found for: '{0}'."</value>
-  </data>
-  <data name="IdTokenCodeMissing" xml:space="preserve">
-    <value>Cannot process the message. Both id_token and code are missing.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/baseline.netcore.json
deleted file mode 100644
index d5c10d18d..000000000
--- a/src/Microsoft.AspNetCore.Authentication.OpenIdConnect/baseline.netcore.json
+++ /dev/null
@@ -1,2452 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.OpenIdConnect, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.OpenIdConnectExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddOpenIdConnect",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddOpenIdConnect",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddOpenIdConnect",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddOpenIdConnect",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.OpenIdConnectAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseOpenIdConnectAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseOpenIdConnectAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.ClaimActionCollectionUniqueExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "MapUniqueJsonKey",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MapUniqueJsonKey",
-          "Parameters": [
-            {
-              "Name": "collection",
-              "Type": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection"
-            },
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.AuthenticationFailedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Exception",
-          "Parameters": [],
-          "ReturnType": "System.Exception",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Exception",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.AuthorizationCodeReceivedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_JwtSecurityToken",
-          "Parameters": [],
-          "ReturnType": "System.IdentityModel.Tokens.Jwt.JwtSecurityToken",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_JwtSecurityToken",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.IdentityModel.Tokens.Jwt.JwtSecurityToken"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenEndpointRequest",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenEndpointRequest",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Backchannel",
-          "Parameters": [],
-          "ReturnType": "System.Net.Http.HttpClient",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenEndpointResponse",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenEndpointResponse",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_HandledCodeRedemption",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleCodeRedemption",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleCodeRedemption",
-          "Parameters": [
-            {
-              "Name": "accessToken",
-              "Type": "System.String"
-            },
-            {
-              "Name": "idToken",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleCodeRedemption",
-          "Parameters": [
-            {
-              "Name": "tokenEndpointResponse",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.MessageReceivedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Token",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Token",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectEvents",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_OnAuthenticationFailed",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.AuthenticationFailedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnAuthenticationFailed",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.AuthenticationFailedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnAuthorizationCodeReceived",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.AuthorizationCodeReceivedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnAuthorizationCodeReceived",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.AuthorizationCodeReceivedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnMessageReceived",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.MessageReceivedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnMessageReceived",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.MessageReceivedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToIdentityProvider",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.RedirectContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToIdentityProvider",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.RedirectContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToIdentityProviderForSignOut",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.RedirectContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToIdentityProviderForSignOut",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.RedirectContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnSignedOutCallbackRedirect",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.RemoteSignOutContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnSignedOutCallbackRedirect",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.RemoteSignOutContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRemoteSignOut",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.RemoteSignOutContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRemoteSignOut",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.RemoteSignOutContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnTokenResponseReceived",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.TokenResponseReceivedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnTokenResponseReceived",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.TokenResponseReceivedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnTokenValidated",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.TokenValidatedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnTokenValidated",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.TokenValidatedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnUserInformationReceived",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.UserInformationReceivedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnUserInformationReceived",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.OpenIdConnect.UserInformationReceivedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthenticationFailed",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.AuthenticationFailedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthorizationCodeReceived",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.AuthorizationCodeReceivedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MessageReceived",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.MessageReceivedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToIdentityProvider",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.RedirectContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToIdentityProviderForSignOut",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.RedirectContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SignedOutCallbackRedirect",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.RemoteSignOutContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RemoteSignOut",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.RemoteSignOutContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "TokenResponseReceived",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.TokenResponseReceivedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "TokenValidated",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.TokenValidatedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UserInformationReceived",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.UserInformationReceivedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.RedirectContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.PropertiesContext<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Handled",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleResponse",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.RemoteSignOutContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            },
-            {
-              "Name": "message",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.TokenResponseReceivedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenEndpointResponse",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenEndpointResponse",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            },
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.TokenValidatedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SecurityToken",
-          "Parameters": [],
-          "ReturnType": "System.IdentityModel.Tokens.Jwt.JwtSecurityToken",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SecurityToken",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.IdentityModel.Tokens.Jwt.JwtSecurityToken"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenEndpointResponse",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenEndpointResponse",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Nonce",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Nonce",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            },
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.UserInformationReceivedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_User",
-          "Parameters": [],
-          "ReturnType": "Newtonsoft.Json.Linq.JObject",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_User",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            },
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectChallengeProperties",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.OAuthChallengeProperties",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_MaxAge",
-          "Parameters": [],
-          "ReturnType": "System.Nullable<System.TimeSpan>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_MaxAge",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Nullable<System.TimeSpan>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Prompt",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Prompt",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "items",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.String>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "items",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.String>"
-            },
-            {
-              "Name": "parameters",
-              "Type": "System.Collections.Generic.IDictionary<System.String, System.Object>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "MaxAgeKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "PromptKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationPropertiesKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "DisplayName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "CookieNoncePrefix",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "RedirectUriForCodePropertiesKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "UserstatePropertiesKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"OpenIdConnect\""
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IAuthenticationSignOutHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "HandleRequestAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Boolean>",
-          "Virtual": true,
-          "Override": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationRequestHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Backchannel",
-          "Parameters": [],
-          "ReturnType": "System.Net.Http.HttpClient",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_HtmlEncoder",
-          "Parameters": [],
-          "ReturnType": "System.Text.Encodings.Web.HtmlEncoder",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectEvents",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Object>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRemoteSignOutAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Boolean>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SignOutAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationSignOutHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleSignOutCallbackAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Boolean>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRemoteAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.HandleRequestResult>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedeemAuthorizationCodeAsync",
-          "Parameters": [
-            {
-              "Name": "tokenEndpointRequest",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "GetUserInformationAsync",
-          "Parameters": [
-            {
-              "Name": "message",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectMessage"
-            },
-            {
-              "Name": "jwt",
-              "Type": "System.IdentityModel.Tokens.Jwt.JwtSecurityToken"
-            },
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.HandleRequestResult>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "htmlEncoder",
-              "Type": "System.Text.Encodings.Web.HtmlEncoder"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Authority",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Authority",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClientId",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ClientId",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClientSecret",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ClientSecret",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Configuration",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Configuration",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ConfigurationManager",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.IConfigurationManager<Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ConfigurationManager",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.IConfigurationManager<Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_GetClaimsFromUserInfoEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_GetClaimsFromUserInfoEndpoint",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClaimActions",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RequireHttpsMetadata",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RequireHttpsMetadata",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_MetadataAddress",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_MetadataAddress",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectEvents",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_MaxAge",
-          "Parameters": [],
-          "ReturnType": "System.Nullable<System.TimeSpan>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_MaxAge",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Nullable<System.TimeSpan>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolValidator",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectProtocolValidator",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolValidator",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectProtocolValidator"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SignedOutCallbackPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SignedOutCallbackPath",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.PathString"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SignedOutRedirectUri",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SignedOutRedirectUri",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RefreshOnIssuerKeyNotFound",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RefreshOnIssuerKeyNotFound",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AuthenticationMethod",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectRedirectBehavior",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AuthenticationMethod",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectRedirectBehavior"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Resource",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Resource",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ResponseMode",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ResponseMode",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ResponseType",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ResponseType",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Prompt",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Prompt",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Scope",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.ICollection<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RemoteSignOutPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RemoteSignOutPath",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.PathString"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SignOutScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SignOutScheme",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_StateDataFormat",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationProperties>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_StateDataFormat",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationProperties>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_StringDataFormat",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_StringDataFormat",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<System.String>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SecurityTokenValidator",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Tokens.ISecurityTokenValidator",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SecurityTokenValidator",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Tokens.ISecurityTokenValidator"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenValidationParameters",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Tokens.TokenValidationParameters",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenValidationParameters",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Tokens.TokenValidationParameters"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_UseTokenLifetime",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_UseTokenLifetime",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SkipUnrecognizedRequests",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SkipUnrecognizedRequests",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_DisableTelemetry",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_DisableTelemetry",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_NonceCookie",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_NonceCookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieBuilder"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectPostConfigureOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "PostConfigure",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "dataProtection",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectRedirectBehavior",
-      "Visibility": "Public",
-      "Kind": "Enumeration",
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "RedirectGet",
-          "Parameters": [],
-          "GenericParameter": [],
-          "Literal": "0"
-        },
-        {
-          "Kind": "Field",
-          "Name": "FormPost",
-          "Parameters": [],
-          "GenericParameter": [],
-          "Literal": "1"
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.OpenIdConnect.Claims.UniqueJsonKeyClaimAction",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.JsonKeyClaimAction",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Run",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "issuer",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "valueType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "jsonKey",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/Events/TwitterCreatingTicketContext.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/Events/TwitterCreatingTicketContext.cs
deleted file mode 100644
index 67f28d529..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/Events/TwitterCreatingTicketContext.cs
+++ /dev/null
@@ -1,77 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    /// <summary>
-    /// Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.
-    /// </summary>
-    public class TwitterCreatingTicketContext : ResultContext<TwitterOptions>
-    {
-        /// <summary>
-        /// Initializes a <see cref="TwitterCreatingTicketContext"/>
-        /// </summary>
-        /// <param name="context">The HTTP environment</param>
-        /// <param name="scheme">The scheme data</param>
-        /// <param name="options">The options for Twitter</param>
-        /// <param name="principal">The <see cref="ClaimsPrincipal"/>.</param>
-        /// <param name="properties">The <see cref="AuthenticationProperties"/>.</param>
-        /// <param name="userId">Twitter user ID</param>
-        /// <param name="screenName">Twitter screen name</param>
-        /// <param name="accessToken">Twitter access token</param>
-        /// <param name="accessTokenSecret">Twitter access token secret</param>
-        /// <param name="user">User details</param>
-        public TwitterCreatingTicketContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            TwitterOptions options,
-            ClaimsPrincipal principal,
-            AuthenticationProperties properties,
-            string userId,
-            string screenName,
-            string accessToken,
-            string accessTokenSecret,
-            JObject user)
-            : base(context, scheme, options)
-        {
-            UserId = userId;
-            ScreenName = screenName;
-            AccessToken = accessToken;
-            AccessTokenSecret = accessTokenSecret;
-            User = user ?? new JObject();
-            Principal = principal;
-            Properties = properties;
-        }
-
-        /// <summary>
-        /// Gets the Twitter user ID
-        /// </summary>
-        public string UserId { get; }
-
-        /// <summary>
-        /// Gets the Twitter screen name
-        /// </summary>
-        public string ScreenName { get; }
-
-        /// <summary>
-        /// Gets the Twitter access token
-        /// </summary>
-        public string AccessToken { get; }
-
-        /// <summary>
-        /// Gets the Twitter access token secret
-        /// </summary>
-        public string AccessTokenSecret { get; }
-
-        /// <summary>
-        /// Gets the JSON-serialized user or an empty
-        /// <see cref="JObject"/> if it is not available.
-        /// </summary>
-        public JObject User { get; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/Events/TwitterEvents.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/Events/TwitterEvents.cs
deleted file mode 100644
index 744c48c5f..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/Events/TwitterEvents.cs
+++ /dev/null
@@ -1,41 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    /// <summary>
-    /// Default <see cref="TwitterEvents"/> implementation.
-    /// </summary>
-    public class TwitterEvents : RemoteAuthenticationEvents
-    {
-        /// <summary>
-        /// Gets or sets the function that is invoked when the Authenticated method is invoked.
-        /// </summary>
-        public Func<TwitterCreatingTicketContext, Task> OnCreatingTicket { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Gets or sets the delegate that is invoked when the ApplyRedirect method is invoked.
-        /// </summary>
-        public Func<RedirectContext<TwitterOptions>, Task> OnRedirectToAuthorizationEndpoint { get; set; } = context =>
-        {
-            context.Response.Redirect(context.RedirectUri);
-            return Task.CompletedTask;
-        };
-
-        /// <summary>
-        /// Invoked whenever Twitter successfully authenticates a user
-        /// </summary>
-        /// <param name="context">Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.</param>
-        /// <returns>A <see cref="Task"/> representing the completed operation.</returns>
-        public virtual Task CreatingTicket(TwitterCreatingTicketContext context) => OnCreatingTicket(context);
-
-        /// <summary>
-        /// Called when a Challenge causes a redirect to authorize endpoint in the Twitter handler
-        /// </summary>
-        /// <param name="context">Contains redirect URI and <see cref="Http.Authentication.AuthenticationProperties"/> of the challenge </param>
-        public virtual Task RedirectToAuthorizationEndpoint(RedirectContext<TwitterOptions> context) => OnRedirectToAuthorizationEndpoint(context);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/LoggingExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/LoggingExtensions.cs
deleted file mode 100644
index 2a2cd5da7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/LoggingExtensions.cs
+++ /dev/null
@@ -1,46 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.Extensions.Logging
-{
-    internal static class LoggingExtensions
-    {
-        private static Action<ILogger, Exception> _obtainRequestToken;
-        private static Action<ILogger, Exception> _obtainAccessToken;
-        private static Action<ILogger, Exception> _retrieveUserDetails;
-
-        static LoggingExtensions()
-        {
-            _obtainRequestToken = LoggerMessage.Define(
-                eventId: 1,
-                logLevel: LogLevel.Debug,
-                formatString: "ObtainRequestToken");
-            _obtainAccessToken = LoggerMessage.Define(
-                eventId: 2,
-                logLevel: LogLevel.Debug,
-                formatString: "ObtainAccessToken");
-            _retrieveUserDetails = LoggerMessage.Define(
-                eventId: 3,
-                logLevel: LogLevel.Debug,
-                formatString: "RetrieveUserDetails");
-
-        }
-
-        public static void ObtainAccessToken(this ILogger logger)
-        {
-            _obtainAccessToken(logger, null);
-        }
-
-        public static void ObtainRequestToken(this ILogger logger)
-        {
-            _obtainRequestToken(logger, null);
-        }
-
-        public static void RetrieveUserDetails(this ILogger logger)
-        {
-            _retrieveUserDetails(logger, null);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/AccessToken.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/AccessToken.cs
deleted file mode 100644
index 550163bec..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/AccessToken.cs
+++ /dev/null
@@ -1,21 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    /// <summary>
-    /// The Twitter access token retrieved from the access token endpoint.
-    /// </summary>
-    public class AccessToken : RequestToken
-    {
-        /// <summary>
-        /// Gets or sets the Twitter User ID.
-        /// </summary>
-        public string UserId { get; set; }
-
-        /// <summary>
-        /// Gets or sets the Twitter screen name.
-        /// </summary>
-        public string ScreenName { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/RequestToken.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/RequestToken.cs
deleted file mode 100644
index 04c334e3d..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/RequestToken.cs
+++ /dev/null
@@ -1,30 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http.Authentication;
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    /// <summary>
-    /// The Twitter request token obtained from the request token endpoint.
-    /// </summary>
-    public class RequestToken
-    {
-        /// <summary>
-        /// Gets or sets the Twitter request token.
-        /// </summary>
-        public string Token { get; set; }
-
-        /// <summary>
-        /// Gets or sets the Twitter token secret.
-        /// </summary>
-        public string TokenSecret { get; set; }
-
-        public bool CallbackConfirmed { get; set; }
-
-        /// <summary>
-        /// Gets or sets a property bag for common authentication properties.
-        /// </summary>
-        public AuthenticationProperties Properties { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/RequestTokenSerializer.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/RequestTokenSerializer.cs
deleted file mode 100644
index 88b10d3d6..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/Messages/RequestTokenSerializer.cs
+++ /dev/null
@@ -1,104 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.IO;
-using Microsoft.AspNetCore.Http.Authentication;
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    /// <summary>
-    /// Serializes and deserializes Twitter request and access tokens so that they can be used by other application components.
-    /// </summary>
-    public class RequestTokenSerializer : IDataSerializer<RequestToken>
-    {
-        private const int FormatVersion = 1;
-
-        /// <summary>
-        /// Serialize a request token.
-        /// </summary>
-        /// <param name="model">The token to serialize</param>
-        /// <returns>A byte array containing the serialized token</returns>
-        public virtual byte[] Serialize(RequestToken model)
-        {
-            using (var memory = new MemoryStream())
-            {
-                using (var writer = new BinaryWriter(memory))
-                {
-                    Write(writer, model);
-                    writer.Flush();
-                    return memory.ToArray();
-                }
-            }
-        }
-
-        /// <summary>
-        /// Deserializes a request token.
-        /// </summary>
-        /// <param name="data">A byte array containing the serialized token</param>
-        /// <returns>The Twitter request token</returns>
-        public virtual RequestToken Deserialize(byte[] data)
-        {
-            using (var memory = new MemoryStream(data))
-            {
-                using (var reader = new BinaryReader(memory))
-                {
-                    return Read(reader);
-                }
-            }
-        }
-
-        /// <summary>
-        /// Writes a Twitter request token as a series of bytes. Used by the <see cref="Serialize"/> method.
-        /// </summary>
-        /// <param name="writer">The writer to use in writing the token</param>
-        /// <param name="token">The token to write</param>
-        public static void Write(BinaryWriter writer, RequestToken token)
-        {
-            if (writer == null)
-            {
-                throw new ArgumentNullException(nameof(writer));
-            }
-
-            if (token == null)
-            {
-                throw new ArgumentNullException(nameof(token));
-            }
-
-            writer.Write(FormatVersion);
-            writer.Write(token.Token);
-            writer.Write(token.TokenSecret);
-            writer.Write(token.CallbackConfirmed);
-            PropertiesSerializer.Default.Write(writer, token.Properties);
-        }
-
-        /// <summary>
-        /// Reads a Twitter request token from a series of bytes. Used by the <see cref="Deserialize"/> method.
-        /// </summary>
-        /// <param name="reader">The reader to use in reading the token bytes</param>
-        /// <returns>The token</returns>
-        public static RequestToken Read(BinaryReader reader)
-        {
-            if (reader == null)
-            {
-                throw new ArgumentNullException(nameof(reader));
-            }
-
-            if (reader.ReadInt32() != FormatVersion)
-            {
-                return null;
-            }
-
-            string token = reader.ReadString();
-            string tokenSecret = reader.ReadString();
-            bool callbackConfirmed = reader.ReadBoolean();
-            AuthenticationProperties properties = PropertiesSerializer.Default.Read(reader);
-            if (properties == null)
-            {
-                return null;
-            }
-
-            return new RequestToken { Token = token, TokenSecret = tokenSecret, CallbackConfirmed = callbackConfirmed, Properties = properties };
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/Microsoft.AspNetCore.Authentication.Twitter.csproj b/src/Microsoft.AspNetCore.Authentication.Twitter/Microsoft.AspNetCore.Authentication.Twitter.csproj
deleted file mode 100644
index 4f2aae616..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/Microsoft.AspNetCore.Authentication.Twitter.csproj
+++ /dev/null
@@ -1,15 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core middleware that enables an application to support Twitter's OAuth 1.0 authentication workflow.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication.OAuth\Microsoft.AspNetCore.Authentication.OAuth.csproj" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/Properties/Resources.Designer.cs
deleted file mode 100644
index 2eabfff29..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,58 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.Twitter.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string Exception_OptionMustBeProvided
-        {
-            get => GetString("Exception_OptionMustBeProvided");
-        }
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string FormatException_OptionMustBeProvided(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_OptionMustBeProvided"), p0);
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string Exception_ValidatorHandlerMismatch
-        {
-            get => GetString("Exception_ValidatorHandlerMismatch");
-        }
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string FormatException_ValidatorHandlerMismatch()
-            => GetString("Exception_ValidatorHandlerMismatch");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/Resources.resx b/src/Microsoft.AspNetCore.Authentication.Twitter/Resources.resx
deleted file mode 100644
index 2a19bea96..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/Resources.resx
+++ /dev/null
@@ -1,126 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_OptionMustBeProvided" xml:space="preserve">
-    <value>The '{0}' option must be provided.</value>
-  </data>
-  <data name="Exception_ValidatorHandlerMismatch" xml:space="preserve">
-    <value>An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterAppBuilderExtensions.cs
deleted file mode 100644
index 36e1111da..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterAppBuilderExtensions.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication.Twitter;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add Twitter authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class TwitterAppBuilderExtensions
-    {
-        /// <summary>
-        /// UseTwitterAuthentication is obsolete. Configure Twitter authentication with AddAuthentication().AddTwitter in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseTwitterAuthentication is obsolete. Configure Twitter authentication with AddAuthentication().AddTwitter in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseTwitterAuthentication(this IApplicationBuilder app)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-
-        /// <summary>
-        /// UseTwitterAuthentication is obsolete. Configure Twitter authentication with AddAuthentication().AddTwitter in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">An action delegate to configure the provided <see cref="TwitterOptions"/>.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        [Obsolete("UseTwitterAuthentication is obsolete. Configure Twitter authentication with AddAuthentication().AddTwitter in ConfigureServices. See https://go.microsoft.com/fwlink/?linkid=845470 for more details.", error: true)]
-        public static IApplicationBuilder UseTwitterAuthentication(this IApplicationBuilder app, TwitterOptions options)
-        {
-            throw new NotSupportedException("This method is no longer supported, see https://go.microsoft.com/fwlink/?linkid=845470");
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterDefaults.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterDefaults.cs
deleted file mode 100644
index bdab80e59..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterDefaults.cs
+++ /dev/null
@@ -1,21 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    public static class TwitterDefaults
-    {
-        public const string AuthenticationScheme = "Twitter";
-
-        public static readonly string DisplayName = "Twitter";
-
-        // https://developer.twitter.com/en/docs/basics/authentication/api-reference/request_token
-        internal const string RequestTokenEndpoint = "https://api.twitter.com/oauth/request_token";
-
-        // https://developer.twitter.com/en/docs/basics/authentication/api-reference/authenticate
-        internal const string AuthenticationEndpoint = "https://api.twitter.com/oauth/authenticate?oauth_token=";
-
-        // https://developer.twitter.com/en/docs/basics/authentication/api-reference/access_token
-        internal const string AccessTokenEndpoint = "https://api.twitter.com/oauth/access_token";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterExtensions.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterExtensions.cs
deleted file mode 100644
index 724380569..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterExtensions.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Twitter;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    public static class TwitterExtensions
-    {
-        public static AuthenticationBuilder AddTwitter(this AuthenticationBuilder builder)
-            => builder.AddTwitter(TwitterDefaults.AuthenticationScheme, _ => { });
-
-        public static AuthenticationBuilder AddTwitter(this AuthenticationBuilder builder, Action<TwitterOptions> configureOptions)
-            => builder.AddTwitter(TwitterDefaults.AuthenticationScheme, configureOptions);
-
-        public static AuthenticationBuilder AddTwitter(this AuthenticationBuilder builder, string authenticationScheme, Action<TwitterOptions> configureOptions)
-            => builder.AddTwitter(authenticationScheme, TwitterDefaults.DisplayName, configureOptions);
-
-        public static AuthenticationBuilder AddTwitter(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<TwitterOptions> configureOptions)
-        {
-            builder.Services.TryAddEnumerable(ServiceDescriptor.Singleton<IPostConfigureOptions<TwitterOptions>, TwitterPostConfigureOptions>());
-            return builder.AddRemoteScheme<TwitterOptions, TwitterHandler>(authenticationScheme, displayName, configureOptions);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterHandler.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterHandler.cs
deleted file mode 100644
index cc8591ed3..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterHandler.cs
+++ /dev/null
@@ -1,314 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Globalization;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Security.Cryptography;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.WebUtilities;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Microsoft.Extensions.Primitives;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    public class TwitterHandler : RemoteAuthenticationHandler<TwitterOptions>
-    {
-        private static readonly DateTime Epoch = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc);
-
-        private HttpClient Backchannel => Options.Backchannel;
-
-        /// <summary>
-        /// The handler calls methods on the events which give the application control at certain points where processing is occurring.
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        protected new TwitterEvents Events
-        {
-            get { return (TwitterEvents)base.Events; }
-            set { base.Events = value; }
-        }
-
-        public TwitterHandler(IOptionsMonitor<TwitterOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        { }
-
-        protected override Task<object> CreateEventsAsync() => Task.FromResult<object>(new TwitterEvents());
-
-        protected override async Task<HandleRequestResult> HandleRemoteAuthenticateAsync()
-        {
-            var query = Request.Query;
-            var protectedRequestToken = Request.Cookies[Options.StateCookie.Name];
-
-            var requestToken = Options.StateDataFormat.Unprotect(protectedRequestToken);
-
-            if (requestToken == null)
-            {
-                return HandleRequestResult.Fail("Invalid state cookie.");
-            }
-
-            var properties = requestToken.Properties;
-
-            var denied = query["denied"];
-            if (!StringValues.IsNullOrEmpty(denied))
-            {
-                // Note: denied errors are special protocol errors indicating the user didn't
-                // approve the authorization demand requested by the remote authorization server.
-                // Since it's a frequent scenario (that is not caused by incorrect configuration),
-                // denied errors are handled differently using HandleAccessDeniedErrorAsync().
-                return await HandleAccessDeniedErrorAsync(properties);
-            }
-
-            var returnedToken = query["oauth_token"];
-            if (StringValues.IsNullOrEmpty(returnedToken))
-            {
-                return HandleRequestResult.Fail("Missing oauth_token", properties);
-            }
-
-            if (!string.Equals(returnedToken, requestToken.Token, StringComparison.Ordinal))
-            {
-                return HandleRequestResult.Fail("Unmatched token", properties);
-            }
-
-            var oauthVerifier = query["oauth_verifier"];
-            if (StringValues.IsNullOrEmpty(oauthVerifier))
-            {
-                return HandleRequestResult.Fail("Missing or blank oauth_verifier", properties);
-            }
-
-            var cookieOptions = Options.StateCookie.Build(Context, Clock.UtcNow);
-
-            Response.Cookies.Delete(Options.StateCookie.Name, cookieOptions);
-
-            var accessToken = await ObtainAccessTokenAsync(requestToken, oauthVerifier);
-
-            var identity = new ClaimsIdentity(new[]
-            {
-                new Claim(ClaimTypes.NameIdentifier, accessToken.UserId, ClaimValueTypes.String, ClaimsIssuer),
-                new Claim(ClaimTypes.Name, accessToken.ScreenName, ClaimValueTypes.String, ClaimsIssuer),
-                new Claim("urn:twitter:userid", accessToken.UserId, ClaimValueTypes.String, ClaimsIssuer),
-                new Claim("urn:twitter:screenname", accessToken.ScreenName, ClaimValueTypes.String, ClaimsIssuer)
-            },
-            ClaimsIssuer);
-
-            JObject user = null;
-            if (Options.RetrieveUserDetails)
-            {
-                user = await RetrieveUserDetailsAsync(accessToken, identity);
-            }
-
-            if (Options.SaveTokens)
-            {
-                properties.StoreTokens(new [] {
-                    new AuthenticationToken { Name = "access_token", Value = accessToken.Token },
-                    new AuthenticationToken { Name = "access_token_secret", Value = accessToken.TokenSecret }
-                });
-            }
-
-            return HandleRequestResult.Success(await CreateTicketAsync(identity, properties, accessToken, user));
-        }
-
-        protected virtual async Task<AuthenticationTicket> CreateTicketAsync(
-            ClaimsIdentity identity, AuthenticationProperties properties, AccessToken token, JObject user)
-        {
-            foreach (var action in Options.ClaimActions)
-            {
-                action.Run(user, identity, ClaimsIssuer);
-            }
-
-            var context = new TwitterCreatingTicketContext(Context, Scheme, Options, new ClaimsPrincipal(identity), properties, token.UserId, token.ScreenName, token.Token, token.TokenSecret, user);
-            await Events.CreatingTicket(context);
-
-            return new AuthenticationTicket(context.Principal, context.Properties, Scheme.Name);
-        }
-
-        protected override async Task HandleChallengeAsync(AuthenticationProperties properties)
-        {
-            if (string.IsNullOrEmpty(properties.RedirectUri))
-            {
-                properties.RedirectUri = OriginalPathBase + OriginalPath + Request.QueryString;
-            }
-
-            // If CallbackConfirmed is false, this will throw
-            var requestToken = await ObtainRequestTokenAsync(BuildRedirectUri(Options.CallbackPath), properties);
-            var twitterAuthenticationEndpoint = TwitterDefaults.AuthenticationEndpoint + requestToken.Token;
-
-            var cookieOptions = Options.StateCookie.Build(Context, Clock.UtcNow);
-
-            Response.Cookies.Append(Options.StateCookie.Name, Options.StateDataFormat.Protect(requestToken), cookieOptions);
-
-            var redirectContext = new RedirectContext<TwitterOptions>(Context, Scheme, Options, properties, twitterAuthenticationEndpoint);
-            await Events.RedirectToAuthorizationEndpoint(redirectContext);
-        }
-
-        private async Task<HttpResponseMessage> ExecuteRequestAsync(string url, HttpMethod httpMethod, RequestToken accessToken = null, Dictionary<string, string> extraOAuthPairs = null, Dictionary<string, string> queryParameters = null, Dictionary<string, string> formData = null)
-        {
-            var authorizationParts = new SortedDictionary<string, string>(extraOAuthPairs ?? new Dictionary<string, string>())
-            {
-                { "oauth_consumer_key", Options.ConsumerKey },
-                { "oauth_nonce", Guid.NewGuid().ToString("N") },
-                { "oauth_signature_method", "HMAC-SHA1" },
-                { "oauth_timestamp", GenerateTimeStamp() },
-                { "oauth_version", "1.0" }
-            };
-
-            if (accessToken != null)
-            {
-                authorizationParts.Add("oauth_token", accessToken.Token);
-            }
-
-            var signatureParts = new SortedDictionary<string, string>(authorizationParts);
-            if (queryParameters != null)
-            {
-                foreach (var queryParameter in queryParameters)
-                {
-                    signatureParts.Add(queryParameter.Key, queryParameter.Value);
-                }
-            }
-            if (formData != null)
-            {
-                foreach (var formItem in formData)
-                {
-                    signatureParts.Add(formItem.Key, formItem.Value);
-                }
-            }
-
-            var parameterBuilder = new StringBuilder();
-            foreach (var signaturePart in signatureParts)
-            {
-                parameterBuilder.AppendFormat("{0}={1}&", Uri.EscapeDataString(signaturePart.Key), Uri.EscapeDataString(signaturePart.Value));
-            }
-            parameterBuilder.Length--;
-            var parameterString = parameterBuilder.ToString();
-
-            var canonicalizedRequestBuilder = new StringBuilder();
-            canonicalizedRequestBuilder.Append(httpMethod.Method);
-            canonicalizedRequestBuilder.Append("&");
-            canonicalizedRequestBuilder.Append(Uri.EscapeDataString(url));
-            canonicalizedRequestBuilder.Append("&");
-            canonicalizedRequestBuilder.Append(Uri.EscapeDataString(parameterString));
-
-            var signature = ComputeSignature(Options.ConsumerSecret, accessToken?.TokenSecret, canonicalizedRequestBuilder.ToString());
-            authorizationParts.Add("oauth_signature", signature);
-
-            var queryString = "";
-            if (queryParameters != null)
-            {
-                var queryStringBuilder = new StringBuilder("?");
-                foreach (var queryParam in queryParameters)
-                {
-                    queryStringBuilder.AppendFormat("{0}={1}&", queryParam.Key, queryParam.Value);
-                }
-                queryStringBuilder.Length--;
-                queryString = queryStringBuilder.ToString();
-            }
-
-            var authorizationHeaderBuilder = new StringBuilder();
-            authorizationHeaderBuilder.Append("OAuth ");
-            foreach (var authorizationPart in authorizationParts)
-            {
-                authorizationHeaderBuilder.AppendFormat("{0}=\"{1}\",", authorizationPart.Key, Uri.EscapeDataString(authorizationPart.Value));
-            }
-            authorizationHeaderBuilder.Length--;
-
-            var request = new HttpRequestMessage(httpMethod, url + queryString);
-            request.Headers.Add("Authorization", authorizationHeaderBuilder.ToString());
-
-            if (formData != null)
-            {
-                request.Content = new FormUrlEncodedContent(formData);
-            }
-
-            return await Backchannel.SendAsync(request, Context.RequestAborted);
-        }
-
-        private async Task<RequestToken> ObtainRequestTokenAsync(string callBackUri, AuthenticationProperties properties)
-        {
-            Logger.ObtainRequestToken();
-
-            var response = await ExecuteRequestAsync(TwitterDefaults.RequestTokenEndpoint, HttpMethod.Post, extraOAuthPairs: new Dictionary<string, string>() { { "oauth_callback", callBackUri } });
-            response.EnsureSuccessStatusCode();
-            var responseText = await response.Content.ReadAsStringAsync();
-
-            var responseParameters = new FormCollection(new FormReader(responseText).ReadForm());
-            if (!string.Equals(responseParameters["oauth_callback_confirmed"], "true", StringComparison.Ordinal))
-            {
-                throw new Exception("Twitter oauth_callback_confirmed is not true.");
-            }
-
-            return new RequestToken { Token = Uri.UnescapeDataString(responseParameters["oauth_token"]), TokenSecret = Uri.UnescapeDataString(responseParameters["oauth_token_secret"]), CallbackConfirmed = true, Properties = properties };
-        }
-
-        private async Task<AccessToken> ObtainAccessTokenAsync(RequestToken token, string verifier)
-        {
-            // https://dev.twitter.com/docs/api/1/post/oauth/access_token
-
-            Logger.ObtainAccessToken();
-
-            var formPost = new Dictionary<string, string> { { "oauth_verifier", verifier } };
-            var response = await ExecuteRequestAsync(TwitterDefaults.AccessTokenEndpoint, HttpMethod.Post, token, formData: formPost);
-
-            if (!response.IsSuccessStatusCode)
-            {
-                Logger.LogError("AccessToken request failed with a status code of " + response.StatusCode);
-                response.EnsureSuccessStatusCode(); // throw
-            }
-
-            var responseText = await response.Content.ReadAsStringAsync();
-            var responseParameters = new FormCollection(new FormReader(responseText).ReadForm());
-
-            return new AccessToken
-            {
-                Token = Uri.UnescapeDataString(responseParameters["oauth_token"]),
-                TokenSecret = Uri.UnescapeDataString(responseParameters["oauth_token_secret"]),
-                UserId = Uri.UnescapeDataString(responseParameters["user_id"]),
-                ScreenName = Uri.UnescapeDataString(responseParameters["screen_name"])
-            };
-        }
-
-        // https://dev.twitter.com/rest/reference/get/account/verify_credentials
-        private async Task<JObject> RetrieveUserDetailsAsync(AccessToken accessToken, ClaimsIdentity identity)
-        {
-            Logger.RetrieveUserDetails();
-
-            var response = await ExecuteRequestAsync("https://api.twitter.com/1.1/account/verify_credentials.json", HttpMethod.Get, accessToken, queryParameters: new Dictionary<string, string>() { { "include_email", "true" } });
-
-            if (!response.IsSuccessStatusCode)
-            {
-                Logger.LogError("Email request failed with a status code of " + response.StatusCode);
-                response.EnsureSuccessStatusCode(); // throw
-            }
-            var responseText = await response.Content.ReadAsStringAsync();
-
-            var result = JObject.Parse(responseText);
-
-            return result;
-        }
-
-        private static string GenerateTimeStamp()
-        {
-            var secondsSinceUnixEpocStart = DateTime.UtcNow - Epoch;
-            return Convert.ToInt64(secondsSinceUnixEpocStart.TotalSeconds).ToString(CultureInfo.InvariantCulture);
-        }
-
-        private string ComputeSignature(string consumerSecret, string tokenSecret, string signatureData)
-        {
-            using (var algorithm = new HMACSHA1())
-            {
-                algorithm.Key = Encoding.ASCII.GetBytes(
-                    string.Format(CultureInfo.InvariantCulture,
-                        "{0}&{1}",
-                        Uri.EscapeDataString(consumerSecret),
-                        string.IsNullOrEmpty(tokenSecret) ? string.Empty : Uri.EscapeDataString(tokenSecret)));
-                var hash = algorithm.ComputeHash(Encoding.ASCII.GetBytes(signatureData));
-                return Convert.ToBase64String(hash);
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterOptions.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterOptions.cs
deleted file mode 100644
index 269516ae1..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterOptions.cs
+++ /dev/null
@@ -1,128 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Globalization;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication.OAuth.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    /// <summary>
-    /// Options for the Twitter authentication handler.
-    /// </summary>
-    public class TwitterOptions : RemoteAuthenticationOptions
-    {
-        private const string DefaultStateCookieName = "__TwitterState";
-
-        private CookieBuilder _stateCookieBuilder;
-
-        /// <summary>
-        /// Initializes a new instance of the <see cref="TwitterOptions"/> class.
-        /// </summary>
-        public TwitterOptions()
-        {
-            CallbackPath = new PathString("/signin-twitter");
-            BackchannelTimeout = TimeSpan.FromSeconds(60);
-            Events = new TwitterEvents();
-
-            ClaimActions.MapJsonKey(ClaimTypes.Email, "email", ClaimValueTypes.Email);
-
-            _stateCookieBuilder = new TwitterCookieBuilder(this)
-            {
-                Name = DefaultStateCookieName,
-                SecurePolicy = CookieSecurePolicy.SameAsRequest,
-                HttpOnly = true,
-                SameSite = SameSiteMode.Lax,
-                IsEssential = true,
-            };
-        }
-
-        /// <summary>
-        /// Gets or sets the consumer key used to communicate with Twitter.
-        /// </summary>
-        /// <value>The consumer key used to communicate with Twitter.</value>
-        public string ConsumerKey { get; set; }
-
-        /// <summary>
-        /// Gets or sets the consumer secret used to sign requests to Twitter.
-        /// </summary>
-        /// <value>The consumer secret used to sign requests to Twitter.</value>
-        public string ConsumerSecret { get; set; }
-
-        /// <summary>
-        /// Enables the retrieval user details during the authentication process, including
-        /// e-mail addresses. Retrieving e-mail addresses requires special permissions
-        /// from Twitter Support on a per application basis. The default is false.
-        /// See https://dev.twitter.com/rest/reference/get/account/verify_credentials
-        /// </summary>
-        public bool RetrieveUserDetails { get; set; }
-
-        /// <summary>
-        /// A collection of claim actions used to select values from the json user data and create Claims.
-        /// </summary>
-        public ClaimActionCollection ClaimActions { get; } = new ClaimActionCollection();
-
-        /// <summary>
-        /// Gets or sets the type used to secure data handled by the handler.
-        /// </summary>
-        public ISecureDataFormat<RequestToken> StateDataFormat { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="TwitterEvents"/> used to handle authentication events.
-        /// </summary>
-        public new TwitterEvents Events
-        {
-            get => (TwitterEvents)base.Events;
-            set => base.Events = value;
-        }
-
-        /// <summary>
-        /// Determines the settings used to create the state cookie before the
-        /// cookie gets added to the response.
-        /// </summary>
-        public CookieBuilder StateCookie
-        {
-            get => _stateCookieBuilder;
-            set => _stateCookieBuilder = value ?? throw new ArgumentNullException(nameof(value));
-        }
-
-        /// <summary>
-        /// Added the validate method to ensure that the customer key and customer secret values are not not empty for the twitter authentication middleware
-        /// </summary>
-        public override void Validate()
-        {
-            base.Validate();
-            if (string.IsNullOrEmpty(ConsumerKey))
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(ConsumerKey)), nameof(ConsumerKey));
-            }
-
-            if (string.IsNullOrEmpty(ConsumerSecret))
-            {
-                throw new ArgumentException(string.Format(CultureInfo.CurrentCulture, Resources.Exception_OptionMustBeProvided, nameof(ConsumerSecret)), nameof(ConsumerSecret));
-            }
-        }
-
-        private class TwitterCookieBuilder : CookieBuilder
-        {
-            private readonly TwitterOptions _twitterOptions;
-
-            public TwitterCookieBuilder(TwitterOptions twitterOptions)
-            {
-                _twitterOptions = twitterOptions;
-            }
-
-            public override CookieOptions Build(HttpContext context, DateTimeOffset expiresFrom)
-            {
-                var options = base.Build(context, expiresFrom);
-                if (!Expiration.HasValue)
-                {
-                    options.Expires = expiresFrom.Add(_twitterOptions.RemoteAuthenticationTimeout);
-                }
-                return options;
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterPostConfigureOptions.cs b/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterPostConfigureOptions.cs
deleted file mode 100644
index 09db5699f..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/TwitterPostConfigureOptions.cs
+++ /dev/null
@@ -1,51 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Net.Http;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    /// <summary>
-    /// Used to setup defaults for all <see cref="TwitterOptions"/>.
-    /// </summary>
-    public class TwitterPostConfigureOptions : IPostConfigureOptions<TwitterOptions>
-    {
-        private readonly IDataProtectionProvider _dp;
-
-        public TwitterPostConfigureOptions(IDataProtectionProvider dataProtection)
-        {
-            _dp = dataProtection;
-        }
-
-        /// <summary>
-        /// Invoked to post configure a TOptions instance.
-        /// </summary>
-        /// <param name="name">The name of the options instance being configured.</param>
-        /// <param name="options">The options instance to configure.</param>
-        public void PostConfigure(string name, TwitterOptions options)
-        {
-            options.DataProtectionProvider = options.DataProtectionProvider ?? _dp;
-
-            if (options.StateDataFormat == null)
-            {
-                var dataProtector = options.DataProtectionProvider.CreateProtector(
-                    typeof(TwitterHandler).FullName, name, "v1");
-                options.StateDataFormat = new SecureDataFormat<RequestToken>(
-                    new RequestTokenSerializer(),
-                    dataProtector);
-            }
-
-            if (options.Backchannel == null)
-            {
-                options.Backchannel = new HttpClient(options.BackchannelHttpHandler ?? new HttpClientHandler());
-                options.Backchannel.Timeout = options.BackchannelTimeout;
-                options.Backchannel.MaxResponseContentBufferSize = 1024 * 1024 * 10; // 10 MB
-                options.Backchannel.DefaultRequestHeaders.Accept.ParseAdd("*/*");
-                options.Backchannel.DefaultRequestHeaders.UserAgent.ParseAdd("Microsoft ASP.NET Core Twitter handler");
-                options.Backchannel.DefaultRequestHeaders.ExpectContinue = false;
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.Twitter/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.Twitter/baseline.netcore.json
deleted file mode 100644
index 03ee64562..000000000
--- a/src/Microsoft.AspNetCore.Authentication.Twitter/baseline.netcore.json
+++ /dev/null
@@ -1,924 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.Twitter, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.TwitterExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddTwitter",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddTwitter",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddTwitter",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddTwitter",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.TwitterAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseTwitterAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseTwitterAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.TwitterCreatingTicketContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.ResultContext<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_UserId",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ScreenName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AccessToken",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AccessTokenSecret",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_User",
-          "Parameters": [],
-          "ReturnType": "Newtonsoft.Json.Linq.JObject",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions"
-            },
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "userId",
-              "Type": "System.String"
-            },
-            {
-              "Name": "screenName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "accessToken",
-              "Type": "System.String"
-            },
-            {
-              "Name": "accessTokenSecret",
-              "Type": "System.String"
-            },
-            {
-              "Name": "user",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.TwitterEvents",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_OnCreatingTicket",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.Twitter.TwitterCreatingTicketContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnCreatingTicket",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.Twitter.TwitterCreatingTicketContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToAuthorizationEndpoint",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToAuthorizationEndpoint",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreatingTicket",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.TwitterCreatingTicketContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToAuthorizationEndpoint",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.RedirectContext<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.AccessToken",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.Twitter.RequestToken",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_UserId",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_UserId",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ScreenName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ScreenName",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.RequestToken",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Token",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Token",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenSecret",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenSecret",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CallbackConfirmed",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CallbackConfirmed",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Properties",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationProperties",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Properties",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.RequestTokenSerializer",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.Twitter.RequestToken>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Serialize",
-          "Parameters": [
-            {
-              "Name": "model",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.RequestToken"
-            }
-          ],
-          "ReturnType": "System.Byte[]",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.Twitter.RequestToken>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Deserialize",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "System.Byte[]"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.Twitter.RequestToken",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.Twitter.RequestToken>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Write",
-          "Parameters": [
-            {
-              "Name": "writer",
-              "Type": "System.IO.BinaryWriter"
-            },
-            {
-              "Name": "token",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.RequestToken"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Read",
-          "Parameters": [
-            {
-              "Name": "reader",
-              "Type": "System.IO.BinaryReader"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.Twitter.RequestToken",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.TwitterDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "DisplayName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"Twitter\""
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.TwitterHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.Twitter.TwitterEvents",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.TwitterEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Object>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRemoteAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.HandleRequestResult>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateTicketAsync",
-          "Parameters": [
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "token",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.AccessToken"
-            },
-            {
-              "Name": "user",
-              "Type": "Newtonsoft.Json.Linq.JObject"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ConsumerKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ConsumerKey",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ConsumerSecret",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ConsumerSecret",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RetrieveUserDetails",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RetrieveUserDetails",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClaimActions",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.OAuth.Claims.ClaimActionCollection",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_StateDataFormat",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.Twitter.RequestToken>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_StateDataFormat",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.Twitter.RequestToken>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.Twitter.TwitterEvents",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.TwitterEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_StateCookie",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_StateCookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieBuilder"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Twitter.TwitterPostConfigureOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "PostConfigure",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.Twitter.TwitterOptions>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "dataProtection",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/AuthenticationFailedContext.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/AuthenticationFailedContext.cs
deleted file mode 100644
index f643fad97..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/AuthenticationFailedContext.cs
+++ /dev/null
@@ -1,35 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// The context object used in for <see cref="WsFederationEvents.AuthenticationFailed"/>.
-    /// </summary>
-    public class AuthenticationFailedContext : RemoteAuthenticationContext<WsFederationOptions>
-    {
-        /// <summary>
-        /// Creates a new context object
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="scheme"></param>
-        /// <param name="options"></param>
-        public AuthenticationFailedContext(HttpContext context, AuthenticationScheme scheme, WsFederationOptions options)
-            : base(context, scheme, options, new AuthenticationProperties())
-        { }
-
-        /// <summary>
-        /// The <see cref="WsFederationMessage"/> from the request, if any.
-        /// </summary>
-        public WsFederationMessage ProtocolMessage { get; set; }
-
-        /// <summary>
-        /// The <see cref="Exception"/> that triggered this event.
-        /// </summary>
-        public Exception Exception { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/MessageReceivedContext.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/MessageReceivedContext.cs
deleted file mode 100644
index 4028fa5e3..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/MessageReceivedContext.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// The context object used for <see cref="WsFederationEvents.MessageReceived"/>.
-    /// </summary>
-    public class MessageReceivedContext : RemoteAuthenticationContext<WsFederationOptions>
-    {
-        /// <summary>
-        /// Creates a new context object.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="scheme"></param>
-        /// <param name="options"></param>
-        /// <param name="properties"></param>
-        public MessageReceivedContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            WsFederationOptions options,
-            AuthenticationProperties properties)
-            : base(context, scheme, options, properties) { }
-
-        /// <summary>
-        /// The <see cref="WsFederationMessage"/> received on this request.
-        /// </summary>
-        public WsFederationMessage ProtocolMessage { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/RedirectContext.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/RedirectContext.cs
deleted file mode 100644
index 654037d0a..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/RedirectContext.cs
+++ /dev/null
@@ -1,44 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// When a user configures the <see cref="WsFederationHandler"/> to be notified prior to redirecting to an IdentityProvider
-    /// an instance of <see cref="RedirectContext"/> is passed to the 'RedirectToAuthenticationEndpoint' or 'RedirectToEndSessionEndpoint' events.
-    /// </summary>
-    public class RedirectContext : PropertiesContext<WsFederationOptions>
-    {
-        /// <summary>
-        /// Creates a new context object.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="scheme"></param>
-        /// <param name="options"></param>
-        /// <param name="properties"></param>
-        public RedirectContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            WsFederationOptions options,
-            AuthenticationProperties properties)
-            : base(context, scheme, options, properties) { }
-
-        /// <summary>
-        /// The <see cref="WsFederationMessage"/> used to compose the redirect.
-        /// </summary>
-        public WsFederationMessage ProtocolMessage { get; set; }
-
-        /// <summary>
-        /// If true, will skip any default logic for this redirect.
-        /// </summary>
-        public bool Handled { get; private set; }
-
-        /// <summary>
-        /// Skips any default logic for this redirect.
-        /// </summary>
-        public void HandleResponse() => Handled = true;
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/RemoteSignoutContext.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/RemoteSignoutContext.cs
deleted file mode 100644
index 8aec24a64..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/RemoteSignoutContext.cs
+++ /dev/null
@@ -1,30 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// An event context for RemoteSignOut.
-    /// </summary>
-    public class RemoteSignOutContext : RemoteAuthenticationContext<WsFederationOptions>
-    {
-        /// <summary>
-        /// 
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="scheme"></param>
-        /// <param name="options"></param>
-        /// <param name="message"></param>
-        public RemoteSignOutContext(HttpContext context, AuthenticationScheme scheme, WsFederationOptions options, WsFederationMessage message)
-            : base(context, scheme, options, new AuthenticationProperties())
-            => ProtocolMessage = message;
-
-        /// <summary>
-        /// The signout message.
-        /// </summary>
-        public WsFederationMessage ProtocolMessage { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/SecurityTokenReceivedContext.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/SecurityTokenReceivedContext.cs
deleted file mode 100644
index 311f41515..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/SecurityTokenReceivedContext.cs
+++ /dev/null
@@ -1,28 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// This Context can be used to be informed when an 'AuthorizationCode' is redeemed for tokens at the token endpoint.
-    /// </summary>
-    public class SecurityTokenReceivedContext : RemoteAuthenticationContext<WsFederationOptions>
-    {
-        /// <summary>
-        /// Creates a <see cref="SecurityTokenReceivedContext"/>
-        /// </summary>
-        public SecurityTokenReceivedContext(HttpContext context, AuthenticationScheme scheme, WsFederationOptions options, AuthenticationProperties properties)
-            : base(context, scheme, options, properties)
-        {
-        }
-
-        /// <summary>
-        /// The <see cref="WsFederationMessage"/> received on this request.
-        /// </summary>
-        public WsFederationMessage ProtocolMessage { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/SecurityTokenValidatedContext.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/SecurityTokenValidatedContext.cs
deleted file mode 100644
index 1f32014b6..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/SecurityTokenValidatedContext.cs
+++ /dev/null
@@ -1,34 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.IdentityModel.Tokens.Jwt;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-using Microsoft.IdentityModel.Tokens;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// The context object used for <see cref="WsFederationEvents.SecurityTokenValidated"/>.
-    /// </summary>
-    public class SecurityTokenValidatedContext : RemoteAuthenticationContext<WsFederationOptions>
-    {
-        /// <summary>
-        /// Creates a <see cref="SecurityTokenValidatedContext"/>
-        /// </summary>
-        public SecurityTokenValidatedContext(HttpContext context, AuthenticationScheme scheme, WsFederationOptions options, ClaimsPrincipal principal, AuthenticationProperties properties)
-            : base(context, scheme, options, properties)
-            => Principal = principal;
-
-        /// <summary>
-        /// The <see cref="WsFederationMessage"/> received on this request.
-        /// </summary>
-        public WsFederationMessage ProtocolMessage { get; set; }
-
-        /// <summary>
-        /// The <see cref="SecurityToken"/> that was validated.
-        /// </summary>
-        public SecurityToken SecurityToken { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/WsFederationEvents.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/WsFederationEvents.cs
deleted file mode 100644
index 55c3936f9..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Events/WsFederationEvents.cs
+++ /dev/null
@@ -1,74 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// Specifies events which the <see cref="WsFederationHandler"></see> invokes to enable developer control over the authentication process. />
-    /// </summary>
-    public class WsFederationEvents : RemoteAuthenticationEvents
-    {
-        /// <summary>
-        /// Invoked if exceptions are thrown during request processing. The exceptions will be re-thrown after this event unless suppressed.
-        /// </summary>
-        public Func<AuthenticationFailedContext, Task> OnAuthenticationFailed { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked when a protocol message is first received.
-        /// </summary>
-        public Func<MessageReceivedContext, Task> OnMessageReceived { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked to manipulate redirects to the identity provider for SignIn, SignOut, or Challenge.
-        /// </summary>
-        public Func<RedirectContext, Task> OnRedirectToIdentityProvider { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked when a wsignoutcleanup request is received at the RemoteSignOutPath endpoint.
-        /// </summary>
-        public Func<RemoteSignOutContext, Task> OnRemoteSignOut { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked with the security token that has been extracted from the protocol message.
-        /// </summary>
-        public Func<SecurityTokenReceivedContext, Task> OnSecurityTokenReceived { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked after the security token has passed validation and a ClaimsIdentity has been generated.
-        /// </summary>
-        public Func<SecurityTokenValidatedContext, Task> OnSecurityTokenValidated { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked if exceptions are thrown during request processing. The exceptions will be re-thrown after this event unless suppressed.
-        /// </summary>
-        public virtual Task AuthenticationFailed(AuthenticationFailedContext context) => OnAuthenticationFailed(context);
-
-        /// <summary>
-        /// Invoked when a protocol message is first received.
-        /// </summary>
-        public virtual Task MessageReceived(MessageReceivedContext context) => OnMessageReceived(context);
-
-        /// <summary>
-        /// Invoked to manipulate redirects to the identity provider for SignIn, SignOut, or Challenge.
-        /// </summary>
-        public virtual Task RedirectToIdentityProvider(RedirectContext context) => OnRedirectToIdentityProvider(context);
-
-        /// <summary>
-        /// Invoked when a wsignoutcleanup request is received at the RemoteSignOutPath endpoint.
-        /// </summary>
-        public virtual Task RemoteSignOut(RemoteSignOutContext context) => OnRemoteSignOut(context);
-
-        /// <summary>
-        /// Invoked with the security token that has been extracted from the protocol message.
-        /// </summary>
-        public virtual Task SecurityTokenReceived(SecurityTokenReceivedContext context) => OnSecurityTokenReceived(context);
-
-        /// <summary>
-        /// Invoked after the security token has passed validation and a ClaimsIdentity has been generated.
-        /// </summary>
-        public virtual Task SecurityTokenValidated(SecurityTokenValidatedContext context) => OnSecurityTokenValidated(context);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/LoggingExtensions.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/LoggingExtensions.cs
deleted file mode 100644
index e28b7e15b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/LoggingExtensions.cs
+++ /dev/null
@@ -1,85 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.Extensions.Logging
-{
-    internal static class LoggingExtensions
-    {
-        private static Action<ILogger, Exception> _signInWithoutWresult;
-        private static Action<ILogger, Exception> _signInWithoutToken;
-        private static Action<ILogger, Exception> _exceptionProcessingMessage;
-        private static Action<ILogger, string, Exception> _malformedRedirectUri;
-        private static Action<ILogger, Exception> _remoteSignOutHandledResponse;
-        private static Action<ILogger, Exception> _remoteSignOutSkipped;
-        private static Action<ILogger, Exception> _remoteSignOut;
-
-        static LoggingExtensions()
-        {
-            _signInWithoutWresult = LoggerMessage.Define(
-                eventId: 1,
-                logLevel: LogLevel.Debug,
-                formatString: "Received a sign-in message without a WResult.");
-            _signInWithoutToken = LoggerMessage.Define(
-                eventId: 2,
-                logLevel: LogLevel.Debug,
-                formatString: "Received a sign-in message without a token.");
-            _exceptionProcessingMessage = LoggerMessage.Define(
-                eventId: 3,
-                logLevel: LogLevel.Error,
-                formatString: "Exception occurred while processing message.");
-            _malformedRedirectUri = LoggerMessage.Define<string>(
-                eventId: 4,
-                logLevel: LogLevel.Warning,
-                formatString: "The sign-out redirect URI '{0}' is malformed.");
-            _remoteSignOutHandledResponse = LoggerMessage.Define(
-               eventId: 5,
-               logLevel: LogLevel.Debug,
-               formatString: "RemoteSignOutContext.HandledResponse");
-            _remoteSignOutSkipped = LoggerMessage.Define(
-               eventId: 6,
-               logLevel: LogLevel.Debug,
-               formatString: "RemoteSignOutContext.Skipped");
-            _remoteSignOut = LoggerMessage.Define(
-               eventId: 7,
-               logLevel: LogLevel.Information,
-               formatString: "Remote signout request processed.");
-        }
-
-        public static void SignInWithoutWresult(this ILogger logger)
-        {
-            _signInWithoutWresult(logger, null);
-        }
-
-        public static void SignInWithoutToken(this ILogger logger)
-        {
-            _signInWithoutToken(logger, null);
-        }
-
-        public static void ExceptionProcessingMessage(this ILogger logger, Exception ex)
-        {
-            _exceptionProcessingMessage(logger, ex);
-        }
-
-        public static void MalformedRedirectUri(this ILogger logger, string uri)
-        {
-            _malformedRedirectUri(logger, uri, null);
-        }
-
-        public static void RemoteSignOutHandledResponse(this ILogger logger)
-        {
-            _remoteSignOutHandledResponse(logger, null);
-        }
-
-        public static void RemoteSignOutSkipped(this ILogger logger)
-        {
-            _remoteSignOutSkipped(logger, null);
-        }
-
-        public static void RemoteSignOut(this ILogger logger)
-        {
-            _remoteSignOut(logger, null);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Microsoft.AspNetCore.Authentication.WsFederation.csproj b/src/Microsoft.AspNetCore.Authentication.WsFederation/Microsoft.AspNetCore.Authentication.WsFederation.csproj
deleted file mode 100644
index ae4d52aff..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Microsoft.AspNetCore.Authentication.WsFederation.csproj
+++ /dev/null
@@ -1,17 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core middleware that enables an application to support the WsFederation authentication workflow.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authentication\Microsoft.AspNetCore.Authentication.csproj" />
-    <PackageReference Include="Microsoft.IdentityModel.Protocols.WsFederation" Version="$(MicrosoftIdentityModelProtocolsWsFederationPackageVersion)" />
-    <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="$(SystemIdentityModelTokensJwtPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/Properties/Resources.Designer.cs
deleted file mode 100644
index 564e826a7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,114 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.WsFederation.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// The service descriptor is missing.
-        /// </summary>
-        internal static string Exception_MissingDescriptor
-        {
-            get => GetString("Exception_MissingDescriptor");
-        }
-
-        /// <summary>
-        /// The service descriptor is missing.
-        /// </summary>
-        internal static string FormatException_MissingDescriptor()
-            => GetString("Exception_MissingDescriptor");
-
-        /// <summary>
-        /// No token validator was found for the given token.
-        /// </summary>
-        internal static string Exception_NoTokenValidatorFound
-        {
-            get => GetString("Exception_NoTokenValidatorFound");
-        }
-
-        /// <summary>
-        /// No token validator was found for the given token.
-        /// </summary>
-        internal static string FormatException_NoTokenValidatorFound()
-            => GetString("Exception_NoTokenValidatorFound");
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string Exception_OptionMustBeProvided
-        {
-            get => GetString("Exception_OptionMustBeProvided");
-        }
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string FormatException_OptionMustBeProvided(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_OptionMustBeProvided"), p0);
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string Exception_ValidatorHandlerMismatch
-        {
-            get => GetString("Exception_ValidatorHandlerMismatch");
-        }
-
-        /// <summary>
-        /// An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.
-        /// </summary>
-        internal static string FormatException_ValidatorHandlerMismatch()
-            => GetString("Exception_ValidatorHandlerMismatch");
-
-        /// <summary>
-        /// The sign in message does not contain a required token.
-        /// </summary>
-        internal static string SignInMessageTokenIsMissing
-        {
-            get => GetString("SignInMessageTokenIsMissing");
-        }
-
-        /// <summary>
-        /// The sign in message does not contain a required token.
-        /// </summary>
-        internal static string FormatSignInMessageTokenIsMissing()
-            => GetString("SignInMessageTokenIsMissing");
-
-        /// <summary>
-        /// The sign in message does not contain a required wresult.
-        /// </summary>
-        internal static string SignInMessageWresultIsMissing
-        {
-            get => GetString("SignInMessageWresultIsMissing");
-        }
-
-        /// <summary>
-        /// The sign in message does not contain a required wresult.
-        /// </summary>
-        internal static string FormatSignInMessageWresultIsMissing()
-            => GetString("SignInMessageWresultIsMissing");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/Resources.resx b/src/Microsoft.AspNetCore.Authentication.WsFederation/Resources.resx
deleted file mode 100644
index e2edafb67..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/Resources.resx
+++ /dev/null
@@ -1,138 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_MissingDescriptor" xml:space="preserve">
-    <value>The service descriptor is missing.</value>
-  </data>
-  <data name="Exception_NoTokenValidatorFound" xml:space="preserve">
-    <value>No token validator was found for the given token.</value>
-  </data>
-  <data name="Exception_OptionMustBeProvided" xml:space="preserve">
-    <value>The '{0}' option must be provided.</value>
-  </data>
-  <data name="Exception_ValidatorHandlerMismatch" xml:space="preserve">
-    <value>An ICertificateValidator cannot be specified at the same time as an HttpMessageHandler unless it is a WebRequestHandler.</value>
-  </data>
-  <data name="SignInMessageTokenIsMissing" xml:space="preserve">
-    <value>The sign in message does not contain a required token.</value>
-  </data>
-  <data name="SignInMessageWresultIsMissing" xml:space="preserve">
-    <value>The sign in message does not contain a required wresult.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationDefaults.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationDefaults.cs
deleted file mode 100644
index 3b97d995b..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationDefaults.cs
+++ /dev/null
@@ -1,26 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// Default values related to WsFederation authentication handler
-    /// </summary>
-    public static class WsFederationDefaults
-    {
-        /// <summary>
-        /// The default authentication type used when registering the WsFederationHandler.
-        /// </summary>
-        public const string AuthenticationScheme = "WsFederation";
-        
-        /// <summary>
-        /// The default display name used when registering the WsFederationHandler.
-        /// </summary>
-        public const string DisplayName = "WsFederation";
-
-        /// <summary>
-        /// Constant used to identify userstate inside AuthenticationProperties that have been serialized in the 'wctx' parameter.
-        /// </summary>
-        public static readonly string UserstatePropertiesKey = "WsFederation.Userstate";
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationExtensions.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationExtensions.cs
deleted file mode 100644
index 47091d58d..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationExtensions.cs
+++ /dev/null
@@ -1,58 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.WsFederation;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    /// <summary>
-    /// Extensions for registering the <see cref="WsFederationHandler"/>.
-    /// </summary>
-    public static class WsFederationExtensions
-    {
-        /// <summary>
-        /// Registers the <see cref="WsFederationHandler"/> using the default authentication scheme, display name, and options.
-        /// </summary>
-        /// <param name="builder"></param>
-        /// <returns></returns>
-        public static AuthenticationBuilder AddWsFederation(this AuthenticationBuilder builder)
-            => builder.AddWsFederation(WsFederationDefaults.AuthenticationScheme, _ => { });
-
-        /// <summary>
-        /// Registers the <see cref="WsFederationHandler"/> using the default authentication scheme, display name, and the given options configuration.
-        /// </summary>
-        /// <param name="builder"></param>
-        /// <param name="configureOptions">A delegate that configures the <see cref="WsFederationOptions"/>.</param>
-        /// <returns></returns>
-        public static AuthenticationBuilder AddWsFederation(this AuthenticationBuilder builder, Action<WsFederationOptions> configureOptions)
-            => builder.AddWsFederation(WsFederationDefaults.AuthenticationScheme, configureOptions);
-
-        /// <summary>
-        /// Registers the <see cref="WsFederationHandler"/> using the given authentication scheme, default display name, and the given options configuration.
-        /// </summary>
-        /// <param name="builder"></param>
-        /// <param name="authenticationScheme"></param>
-        /// <param name="configureOptions">A delegate that configures the <see cref="WsFederationOptions"/>.</param>
-        /// <returns></returns>
-        public static AuthenticationBuilder AddWsFederation(this AuthenticationBuilder builder, string authenticationScheme, Action<WsFederationOptions> configureOptions)
-            => builder.AddWsFederation(authenticationScheme, WsFederationDefaults.DisplayName, configureOptions);
-
-        /// <summary>
-        /// Registers the <see cref="WsFederationHandler"/> using the given authentication scheme, display name, and options configuration.
-        /// </summary>
-        /// <param name="builder"></param>
-        /// <param name="authenticationScheme"></param>
-        /// <param name="displayName"></param>
-        /// <param name="configureOptions">A delegate that configures the <see cref="WsFederationOptions"/>.</param>
-        /// <returns></returns>
-        public static AuthenticationBuilder AddWsFederation(this AuthenticationBuilder builder, string authenticationScheme, string displayName, Action<WsFederationOptions> configureOptions)
-        {
-            builder.Services.TryAddEnumerable(ServiceDescriptor.Singleton<IPostConfigureOptions<WsFederationOptions>, WsFederationPostConfigureOptions>());
-            return builder.AddRemoteScheme<WsFederationOptions, WsFederationHandler>(authenticationScheme, displayName, configureOptions);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationHandler.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationHandler.cs
deleted file mode 100644
index c4bb8fff7..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationHandler.cs
+++ /dev/null
@@ -1,425 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-using Microsoft.IdentityModel.Tokens;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// A per-request authentication handler for the WsFederation.
-    /// </summary>
-    public class WsFederationHandler : RemoteAuthenticationHandler<WsFederationOptions>, IAuthenticationSignOutHandler
-    {
-        private const string CorrelationProperty = ".xsrf";
-        private WsFederationConfiguration _configuration;
-
-        /// <summary>
-        /// Creates a new WsFederationAuthenticationHandler
-        /// </summary>
-        /// <param name="options"></param>
-        /// <param name="encoder"></param>
-        /// <param name="clock"></param>
-        /// <param name="logger"></param>
-        public WsFederationHandler(IOptionsMonitor<WsFederationOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock)
-        {
-        }
-
-        /// <summary>
-        /// The handler calls methods on the events which give the application control at certain points where processing is occurring.
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        protected new WsFederationEvents Events
-        {
-            get { return (WsFederationEvents)base.Events; }
-            set { base.Events = value; }
-        }
-
-        /// <summary>
-        /// Creates a new instance of the events instance.
-        /// </summary>
-        /// <returns>A new instance of the events instance.</returns>
-        protected override Task<object> CreateEventsAsync() => Task.FromResult<object>(new WsFederationEvents());
-
-        /// <summary>
-        /// Overridden to handle remote signout requests
-        /// </summary>
-        /// <returns></returns>
-        public override Task<bool> HandleRequestAsync()
-        {
-            // RemoteSignOutPath and CallbackPath may be the same, fall through if the message doesn't match.
-            if (Options.RemoteSignOutPath.HasValue && Options.RemoteSignOutPath == Request.Path && HttpMethods.IsGet(Request.Method)
-                && string.Equals(Request.Query[WsFederationConstants.WsFederationParameterNames.Wa],
-                    WsFederationConstants.WsFederationActions.SignOutCleanup, StringComparison.OrdinalIgnoreCase))
-            {
-                // We've received a remote sign-out request
-                return HandleRemoteSignOutAsync();
-            }
-
-            return base.HandleRequestAsync();
-        }
-
-        /// <summary>
-        /// Handles Challenge
-        /// </summary>
-        /// <returns></returns>
-        protected override async Task HandleChallengeAsync(AuthenticationProperties properties)
-        {
-            if (_configuration == null)
-            {
-                _configuration = await Options.ConfigurationManager.GetConfigurationAsync(Context.RequestAborted);
-            }
-
-            // Save the original challenge URI so we can redirect back to it when we're done.
-            if (string.IsNullOrEmpty(properties.RedirectUri))
-            {
-                properties.RedirectUri = OriginalPathBase + OriginalPath + Request.QueryString;
-            }
-
-            var wsFederationMessage = new WsFederationMessage()
-            {
-                IssuerAddress = _configuration.TokenEndpoint ?? string.Empty,
-                Wtrealm = Options.Wtrealm,
-                Wa = WsFederationConstants.WsFederationActions.SignIn,
-            };
-
-            if (!string.IsNullOrEmpty(Options.Wreply))
-            {
-                wsFederationMessage.Wreply = Options.Wreply;
-            }
-            else
-            {
-                wsFederationMessage.Wreply = BuildRedirectUri(Options.CallbackPath);
-            }
-
-            GenerateCorrelationId(properties);
-
-            var redirectContext = new RedirectContext(Context, Scheme, Options, properties)
-            {
-                ProtocolMessage = wsFederationMessage
-            };
-            await Events.RedirectToIdentityProvider(redirectContext);
-
-            if (redirectContext.Handled)
-            {
-                return;
-            }
-
-            wsFederationMessage = redirectContext.ProtocolMessage;
-
-            if (!string.IsNullOrEmpty(wsFederationMessage.Wctx))
-            {
-                properties.Items[WsFederationDefaults.UserstatePropertiesKey] = wsFederationMessage.Wctx;
-            }
-
-            wsFederationMessage.Wctx = Uri.EscapeDataString(Options.StateDataFormat.Protect(properties));
-
-            var redirectUri = wsFederationMessage.CreateSignInUrl();
-            if (!Uri.IsWellFormedUriString(redirectUri, UriKind.Absolute))
-            {
-                Logger.MalformedRedirectUri(redirectUri);
-            }
-            Response.Redirect(redirectUri);
-        }
-
-        /// <summary>
-        /// Invoked to process incoming authentication messages.
-        /// </summary>
-        /// <returns></returns>
-        protected override async Task<HandleRequestResult> HandleRemoteAuthenticateAsync()
-        {
-            WsFederationMessage wsFederationMessage = null;
-            AuthenticationProperties properties = null;
-
-            // assumption: if the ContentType is "application/x-www-form-urlencoded" it should be safe to read as it is small.
-            if (HttpMethods.IsPost(Request.Method)
-              && !string.IsNullOrEmpty(Request.ContentType)
-              // May have media/type; charset=utf-8, allow partial match.
-              && Request.ContentType.StartsWith("application/x-www-form-urlencoded", StringComparison.OrdinalIgnoreCase)
-              && Request.Body.CanRead)
-            {
-                var form = await Request.ReadFormAsync();
-    
-                wsFederationMessage = new WsFederationMessage(form.Select(pair => new KeyValuePair<string, string[]>(pair.Key, pair.Value)));
-            }
-
-            if (wsFederationMessage == null || !wsFederationMessage.IsSignInMessage)
-            {
-                if (Options.SkipUnrecognizedRequests)
-                {
-                    // Not for us?
-                    return HandleRequestResult.SkipHandler();
-                }
-
-                return HandleRequestResult.Fail("No message.");
-            }
-            
-            try
-            {
-                // Retrieve our cached redirect uri
-                var state = wsFederationMessage.Wctx;
-                // WsFed allows for uninitiated logins, state may be missing. See AllowUnsolicitedLogins.
-                properties = Options.StateDataFormat.Unprotect(state);
-
-                if (properties == null)
-                {
-                    if (!Options.AllowUnsolicitedLogins)
-                    {
-                        return HandleRequestResult.Fail("Unsolicited logins are not allowed.");
-                    }
-                }
-                else
-                {
-                    // Extract the user state from properties and reset.
-                    properties.Items.TryGetValue(WsFederationDefaults.UserstatePropertiesKey, out var userState);
-                    wsFederationMessage.Wctx = userState;
-                }
-
-                var messageReceivedContext = new MessageReceivedContext(Context, Scheme, Options, properties)
-                {
-                    ProtocolMessage = wsFederationMessage
-                };
-                await Events.MessageReceived(messageReceivedContext);
-                if (messageReceivedContext.Result != null)
-                {
-                    return messageReceivedContext.Result;
-                }
-                wsFederationMessage = messageReceivedContext.ProtocolMessage;
-                properties = messageReceivedContext.Properties; // Provides a new instance if not set.
-
-                // If state did flow from the challenge then validate it. See AllowUnsolicitedLogins above.
-                if (properties.Items.TryGetValue(CorrelationProperty, out string correlationId)
-                    && !ValidateCorrelationId(properties))
-                {
-                    return HandleRequestResult.Fail("Correlation failed.", properties);
-                }
-
-                if (wsFederationMessage.Wresult == null)
-                {
-                    Logger.SignInWithoutWresult();
-                    return HandleRequestResult.Fail(Resources.SignInMessageWresultIsMissing, properties);
-                }
-
-                var token = wsFederationMessage.GetToken();
-                if (string.IsNullOrEmpty(token))
-                {
-                    Logger.SignInWithoutToken();
-                    return HandleRequestResult.Fail(Resources.SignInMessageTokenIsMissing, properties);
-                }
-
-                var securityTokenReceivedContext = new SecurityTokenReceivedContext(Context, Scheme, Options, properties)
-                {
-                    ProtocolMessage = wsFederationMessage
-                };
-                await Events.SecurityTokenReceived(securityTokenReceivedContext);
-                if (securityTokenReceivedContext.Result != null)
-                {
-                    return securityTokenReceivedContext.Result;
-                }
-                wsFederationMessage = securityTokenReceivedContext.ProtocolMessage;
-                properties = messageReceivedContext.Properties;
-
-                if (_configuration == null)
-                {
-                    _configuration = await Options.ConfigurationManager.GetConfigurationAsync(Context.RequestAborted);
-                }
-
-                // Copy and augment to avoid cross request race conditions for updated configurations.
-                var tvp = Options.TokenValidationParameters.Clone();
-                var issuers = new[] { _configuration.Issuer };
-                tvp.ValidIssuers = (tvp.ValidIssuers == null ? issuers : tvp.ValidIssuers.Concat(issuers));
-                tvp.IssuerSigningKeys = (tvp.IssuerSigningKeys == null ? _configuration.SigningKeys : tvp.IssuerSigningKeys.Concat(_configuration.SigningKeys));
-
-                ClaimsPrincipal principal = null;
-                SecurityToken parsedToken = null;
-                foreach (var validator in Options.SecurityTokenHandlers)
-                {
-                    if (validator.CanReadToken(token))
-                    {
-                        principal = validator.ValidateToken(token, tvp, out parsedToken);
-                        break;
-                    }
-                }
-
-                if (principal == null)
-                {
-                    throw new SecurityTokenException(Resources.Exception_NoTokenValidatorFound);
-                }
-
-                if (Options.UseTokenLifetime && parsedToken != null)
-                {
-                    // Override any session persistence to match the token lifetime.
-                    var issued = parsedToken.ValidFrom;
-                    if (issued != DateTime.MinValue)
-                    {
-                        properties.IssuedUtc = issued.ToUniversalTime();
-                    }
-                    var expires = parsedToken.ValidTo;
-                    if (expires != DateTime.MinValue)
-                    {
-                        properties.ExpiresUtc = expires.ToUniversalTime();
-                    }
-                    properties.AllowRefresh = false;
-                }
-
-                var securityTokenValidatedContext = new SecurityTokenValidatedContext(Context, Scheme, Options, principal, properties)
-                {
-                    ProtocolMessage = wsFederationMessage,
-                    SecurityToken = parsedToken,
-                };
-
-                await Events.SecurityTokenValidated(securityTokenValidatedContext);
-                if (securityTokenValidatedContext.Result != null)
-                {
-                    return securityTokenValidatedContext.Result;
-                }
-
-                // Flow possible changes
-                principal = securityTokenValidatedContext.Principal;
-                properties = securityTokenValidatedContext.Properties;
-
-                return HandleRequestResult.Success(new AuthenticationTicket(principal, properties, Scheme.Name));
-            }
-            catch (Exception exception)
-            {
-                Logger.ExceptionProcessingMessage(exception);
-
-                // Refresh the configuration for exceptions that may be caused by key rollovers. The user can also request a refresh in the notification.
-                if (Options.RefreshOnIssuerKeyNotFound && exception.GetType().Equals(typeof(SecurityTokenSignatureKeyNotFoundException)))
-                {
-                    Options.ConfigurationManager.RequestRefresh();
-                }
-
-                var authenticationFailedContext = new AuthenticationFailedContext(Context, Scheme, Options)
-                {
-                    ProtocolMessage = wsFederationMessage,
-                    Exception = exception
-                };
-                await Events.AuthenticationFailed(authenticationFailedContext);
-                if (authenticationFailedContext.Result != null)
-                {
-                    return authenticationFailedContext.Result;
-                }
-
-                return HandleRequestResult.Fail(exception, properties);
-            }
-        }
-
-        /// <summary>
-        /// Handles Signout
-        /// </summary>
-        /// <returns></returns>
-        public async virtual Task SignOutAsync(AuthenticationProperties properties)
-        {
-            var target = ResolveTarget(Options.ForwardSignOut);
-            if (target != null)
-            {
-                await Context.SignOutAsync(target, properties);
-                return;
-            }
-
-            if (_configuration == null)
-            {
-                _configuration = await Options.ConfigurationManager.GetConfigurationAsync(Context.RequestAborted);
-            }
-
-            var wsFederationMessage = new WsFederationMessage()
-            {
-                IssuerAddress = _configuration.TokenEndpoint ?? string.Empty,
-                Wtrealm = Options.Wtrealm,
-                Wa = WsFederationConstants.WsFederationActions.SignOut,
-            };
-
-            // Set Wreply in order:
-            // 1. properties.Redirect
-            // 2. Options.SignOutWreply
-            // 3. Options.Wreply
-            if (properties != null && !string.IsNullOrEmpty(properties.RedirectUri))
-            {
-                wsFederationMessage.Wreply = BuildRedirectUriIfRelative(properties.RedirectUri);
-            }
-            else if (!string.IsNullOrEmpty(Options.SignOutWreply))
-            {
-                wsFederationMessage.Wreply = BuildRedirectUriIfRelative(Options.SignOutWreply);
-            }
-            else if (!string.IsNullOrEmpty(Options.Wreply))
-            {
-                wsFederationMessage.Wreply = BuildRedirectUriIfRelative(Options.Wreply);
-            }
-
-            var redirectContext = new RedirectContext(Context, Scheme, Options, properties)
-            {
-                ProtocolMessage = wsFederationMessage
-            };
-            await Events.RedirectToIdentityProvider(redirectContext);
-
-            if (!redirectContext.Handled)
-            {
-                var redirectUri = redirectContext.ProtocolMessage.CreateSignOutUrl();
-                if (!Uri.IsWellFormedUriString(redirectUri, UriKind.Absolute))
-                {
-                    Logger.MalformedRedirectUri(redirectUri);
-                }
-                Response.Redirect(redirectUri);
-            }
-        }
-
-        /// <summary>
-        /// Handles wsignoutcleanup1.0 messages sent to the RemoteSignOutPath
-        /// </summary>
-        /// <returns></returns>
-        protected virtual async Task<bool> HandleRemoteSignOutAsync()
-        {
-            var message = new WsFederationMessage(Request.Query.Select(pair => new KeyValuePair<string, string[]>(pair.Key, pair.Value)));
-            var remoteSignOutContext = new RemoteSignOutContext(Context, Scheme, Options, message);
-            await Events.RemoteSignOut(remoteSignOutContext);
-
-            if (remoteSignOutContext.Result != null)
-            {
-                if (remoteSignOutContext.Result.Handled)
-                {
-                    Logger.RemoteSignOutHandledResponse();
-                    return true;
-                }
-                if (remoteSignOutContext.Result.Skipped)
-                {
-                    Logger.RemoteSignOutSkipped();
-                    return false;
-                }
-            }
-
-            Logger.RemoteSignOut();
-
-            await Context.SignOutAsync(Options.SignOutScheme);
-            return true;
-        }
-
-        /// <summary>
-        /// Build a redirect path if the given path is a relative path.
-        /// </summary>
-        private string BuildRedirectUriIfRelative(string uri)
-        {
-            if (string.IsNullOrEmpty(uri))
-            {
-                return uri;
-            }
-
-            if (!uri.StartsWith("/", StringComparison.Ordinal))
-            {
-                return uri;
-            }
-
-            return BuildRedirectUri(uri);
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationOptions.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationOptions.cs
deleted file mode 100644
index 4e0612677..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationOptions.cs
+++ /dev/null
@@ -1,180 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Collections.ObjectModel;
-using System.IdentityModel.Tokens.Jwt;
-using Microsoft.AspNetCore.Http;
-using Microsoft.IdentityModel.Protocols;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-using Microsoft.IdentityModel.Tokens;
-using Microsoft.IdentityModel.Tokens.Saml;
-using Microsoft.IdentityModel.Tokens.Saml2;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// Configuration options for <see cref="WsFederationHandler"/>
-    /// </summary>
-    public class WsFederationOptions : RemoteAuthenticationOptions
-    {
-        private ICollection<ISecurityTokenValidator> _securityTokenHandlers = new Collection<ISecurityTokenValidator>()
-        {
-            new Saml2SecurityTokenHandler(),
-            new SamlSecurityTokenHandler(),
-            new JwtSecurityTokenHandler()
-        };
-        private TokenValidationParameters _tokenValidationParameters = new TokenValidationParameters();
-
-        /// <summary>
-        /// Initializes a new <see cref="WsFederationOptions"/>
-        /// </summary>
-        public WsFederationOptions()
-        {
-            CallbackPath = "/signin-wsfed";
-            // In ADFS the cleanup messages are sent to the same callback path as the initial login.
-            // In AAD it sends the cleanup message to a random Reply Url and there's no deterministic way to configure it.
-            //  If you manage to get it configured, then you can set RemoteSignOutPath accordingly.
-            RemoteSignOutPath = "/signin-wsfed";
-            Events = new WsFederationEvents();
-        }
-
-        /// <summary>
-        /// Check that the options are valid.  Should throw an exception if things are not ok.
-        /// </summary>
-        public override void Validate()
-        {
-            base.Validate();
-
-            if (ConfigurationManager == null)
-            {
-                throw new InvalidOperationException($"Provide {nameof(MetadataAddress)}, "
-                + $"{nameof(Configuration)}, or {nameof(ConfigurationManager)} to {nameof(WsFederationOptions)}");
-            }
-        }
-
-        /// <summary>
-        /// Configuration provided directly by the developer. If provided, then MetadataAddress and the Backchannel properties
-        /// will not be used. This information should not be updated during request processing.
-        /// </summary>
-        public WsFederationConfiguration Configuration { get; set; }
-
-        /// <summary>
-        /// Gets or sets the address to retrieve the wsFederation metadata
-        /// </summary>
-        public string MetadataAddress { get; set; }
-
-        /// <summary>
-        /// Responsible for retrieving, caching, and refreshing the configuration from metadata.
-        /// If not provided, then one will be created using the MetadataAddress and Backchannel properties.
-        /// </summary>
-        public IConfigurationManager<WsFederationConfiguration> ConfigurationManager { get; set; }
-
-        /// <summary>
-        /// Gets or sets if a metadata refresh should be attempted after a SecurityTokenSignatureKeyNotFoundException. This allows for automatic
-        /// recovery in the event of a signature key rollover. This is enabled by default.
-        /// </summary>
-        public bool RefreshOnIssuerKeyNotFound { get; set; } = true;
-
-        /// <summary>
-        /// Indicates if requests to the CallbackPath may also be for other components. If enabled the handler will pass
-        /// requests through that do not contain WsFederation authentication responses. Disabling this and setting the
-        /// CallbackPath to a dedicated endpoint may provide better error handling.
-        /// This is disabled by default.
-        /// </summary>
-        public bool SkipUnrecognizedRequests { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="WsFederationEvents"/> to call when processing WsFederation messages.
-        /// </summary>
-        public new WsFederationEvents Events
-        {
-            get => (WsFederationEvents)base.Events;
-            set => base.Events = value;
-        }
-
-        /// <summary>
-        /// Gets or sets the collection of <see cref="ISecurityTokenValidator"/> used to read and validate the <see cref="SecurityToken"/>s.
-        /// </summary>
-        public ICollection<ISecurityTokenValidator> SecurityTokenHandlers
-        {
-            get
-            {
-                return _securityTokenHandlers;
-            }
-            set
-            {
-                _securityTokenHandlers = value ?? throw new ArgumentNullException(nameof(SecurityTokenHandlers));
-            }
-        }
-
-        /// <summary>
-        /// Gets or sets the type used to secure data handled by the middleware.
-        /// </summary>
-        public ISecureDataFormat<AuthenticationProperties> StateDataFormat { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="TokenValidationParameters"/>
-        /// </summary>
-        /// <exception cref="ArgumentNullException"> if 'TokenValidationParameters' is null.</exception>
-        public TokenValidationParameters TokenValidationParameters
-        {
-            get
-            {
-                return _tokenValidationParameters;
-            }
-            set
-            {
-                _tokenValidationParameters = value ?? throw new ArgumentNullException(nameof(TokenValidationParameters));
-            }
-        }
-
-        /// <summary>
-        /// Gets or sets the 'wreply'. CallbackPath must be set to match or cleared so it can be generated dynamically.
-        /// This field is optional. If not set then it will be generated from the current request and the CallbackPath.
-        /// </summary>
-        public string Wreply { get; set; }
-
-        /// <summary>
-        /// Gets or sets the 'wreply' value used during sign-out.
-        /// If none is specified then the value from the Wreply field is used.
-        /// </summary>
-        public string SignOutWreply { get; set; }
-        
-        /// <summary>
-        /// Gets or sets the 'wtrealm'.
-        /// </summary>
-        public string Wtrealm { get; set; }
-
-        /// <summary>
-        /// Indicates that the authentication session lifetime (e.g. cookies) should match that of the authentication token.
-        /// If the token does not provide lifetime information then normal session lifetimes will be used.
-        /// This is enabled by default.
-        /// </summary>
-        public bool UseTokenLifetime { get; set; } = true;
-
-        /// <summary>
-        /// Gets or sets if HTTPS is required for the metadata address or authority.
-        /// The default is true. This should be disabled only in development environments.
-        /// </summary>
-        public bool RequireHttpsMetadata { get; set; } = true;
-
-        /// <summary>
-        /// The Ws-Federation protocol allows the user to initiate logins without contacting the application for a Challenge first.
-        /// However, that flow is susceptible to XSRF and other attacks so it is disabled here by default.
-        /// </summary>
-        public bool AllowUnsolicitedLogins { get; set; }
-
-        /// <summary>
-        /// Requests received on this path will cause the handler to invoke SignOut using the SignOutScheme.
-        /// </summary>
-        public PathString RemoteSignOutPath { get; set; }
-
-        /// <summary>
-        /// The Authentication Scheme to use with SignOutAsync from RemoteSignOutPath. SignInScheme will be used if this
-        /// is not set.
-        /// </summary>
-        public string SignOutScheme { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationPostConfigureOptions.cs b/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationPostConfigureOptions.cs
deleted file mode 100644
index 62647d4fc..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/WsFederationPostConfigureOptions.cs
+++ /dev/null
@@ -1,89 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Net.Http;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Options;
-using Microsoft.IdentityModel.Protocols;
-using Microsoft.IdentityModel.Protocols.WsFederation;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    /// <summary>
-    /// Used to setup defaults for all <see cref="WsFederationOptions"/>.
-    /// </summary>
-    public class WsFederationPostConfigureOptions : IPostConfigureOptions<WsFederationOptions>
-    {
-        private readonly IDataProtectionProvider _dp;
-
-        /// <summary>
-        /// 
-        /// </summary>
-        /// <param name="dataProtection"></param>
-        public WsFederationPostConfigureOptions(IDataProtectionProvider dataProtection)
-        {
-            _dp = dataProtection;
-        }
-
-        /// <summary>
-        /// Invoked to post configure a TOptions instance.
-        /// </summary>
-        /// <param name="name">The name of the options instance being configured.</param>
-        /// <param name="options">The options instance to configure.</param>
-        public void PostConfigure(string name, WsFederationOptions options)
-        {
-            options.DataProtectionProvider = options.DataProtectionProvider ?? _dp;
-
-            if (string.IsNullOrEmpty(options.SignOutScheme))
-            {
-                options.SignOutScheme = options.SignInScheme;
-            }
-
-            if (options.StateDataFormat == null)
-            {
-                var dataProtector = options.DataProtectionProvider.CreateProtector(
-                    typeof(WsFederationHandler).FullName, name, "v1");
-                options.StateDataFormat = new PropertiesDataFormat(dataProtector);
-            }
-            
-            if (!options.CallbackPath.HasValue && !string.IsNullOrEmpty(options.Wreply) && Uri.TryCreate(options.Wreply, UriKind.Absolute, out var wreply))
-            {
-                // Wreply must be a very specific, case sensitive value, so we can't generate it. Instead we generate CallbackPath from it.
-                options.CallbackPath = PathString.FromUriComponent(wreply);
-            }
-            
-            if (string.IsNullOrEmpty(options.TokenValidationParameters.ValidAudience))
-            {
-                options.TokenValidationParameters.ValidAudience = options.Wtrealm;
-            }
-
-            if (options.Backchannel == null)
-            {
-                options.Backchannel = new HttpClient(options.BackchannelHttpHandler ?? new HttpClientHandler());
-                options.Backchannel.DefaultRequestHeaders.UserAgent.ParseAdd("Microsoft ASP.NET Core WsFederation handler");
-                options.Backchannel.Timeout = options.BackchannelTimeout;
-                options.Backchannel.MaxResponseContentBufferSize = 1024 * 1024 * 10; // 10 MB
-            }
-
-            if (options.ConfigurationManager == null)
-            {
-                if (options.Configuration != null)
-                {
-                    options.ConfigurationManager = new StaticConfigurationManager<WsFederationConfiguration>(options.Configuration);
-                }
-                else if (!string.IsNullOrEmpty(options.MetadataAddress))
-                {
-                    if (options.RequireHttpsMetadata && !options.MetadataAddress.StartsWith("https://", StringComparison.OrdinalIgnoreCase))
-                    {
-                        throw new InvalidOperationException("The MetadataAddress must use HTTPS unless disabled for development by setting RequireHttpsMetadata=false.");
-                    }
-
-                    options.ConfigurationManager = new ConfigurationManager<WsFederationConfiguration>(options.MetadataAddress, new WsFederationConfigurationRetriever(),
-                        new HttpDocumentRetriever(options.Backchannel) { RequireHttps = options.RequireHttpsMetadata });
-                }
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication.WsFederation/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication.WsFederation/baseline.netcore.json
deleted file mode 100644
index 41150cbc0..000000000
--- a/src/Microsoft.AspNetCore.Authentication.WsFederation/baseline.netcore.json
+++ /dev/null
@@ -1,1314 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication.WsFederation, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.WsFederationExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddWsFederation",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddWsFederation",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddWsFederation",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddWsFederation",
-          "Parameters": [
-            {
-              "Name": "builder",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.AuthenticationFailedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Exception",
-          "Parameters": [],
-          "ReturnType": "System.Exception",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Exception",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.MessageReceivedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.RedirectContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.PropertiesContext<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Handled",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleResponse",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.RemoteSignOutContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions"
-            },
-            {
-              "Name": "message",
-              "Type": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.SecurityTokenReceivedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.SecurityTokenValidatedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ProtocolMessage",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ProtocolMessage",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationMessage"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SecurityToken",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Tokens.SecurityToken",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SecurityToken",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Tokens.SecurityToken"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions"
-            },
-            {
-              "Name": "principal",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationEvents",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_OnAuthenticationFailed",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.AuthenticationFailedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnAuthenticationFailed",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.AuthenticationFailedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnMessageReceived",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.MessageReceivedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnMessageReceived",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.MessageReceivedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRedirectToIdentityProvider",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.RedirectContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRedirectToIdentityProvider",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.RedirectContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnRemoteSignOut",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.RemoteSignOutContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRemoteSignOut",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.RemoteSignOutContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnSecurityTokenReceived",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.SecurityTokenReceivedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnSecurityTokenReceived",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.SecurityTokenReceivedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnSecurityTokenValidated",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.SecurityTokenValidatedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnSecurityTokenValidated",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.WsFederation.SecurityTokenValidatedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthenticationFailed",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.AuthenticationFailedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "MessageReceived",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.MessageReceivedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RedirectToIdentityProvider",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.RedirectContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RemoteSignOut",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.RemoteSignOutContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SecurityTokenReceived",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.SecurityTokenReceivedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SecurityTokenValidated",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.SecurityTokenValidatedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationDefaults",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "UserstatePropertiesKey",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "ReadOnly": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Field",
-          "Name": "AuthenticationScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"WsFederation\""
-        },
-        {
-          "Kind": "Field",
-          "Name": "DisplayName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": [],
-          "Constant": true,
-          "Literal": "\"WsFederation\""
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IAuthenticationSignOutHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "HandleRequestAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Boolean>",
-          "Virtual": true,
-          "Override": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationRequestHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationEvents",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Object>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRemoteAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.HandleRequestResult>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SignOutAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationSignOutHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRemoteSignOutAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Boolean>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Configuration",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationConfiguration",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Configuration",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.WsFederation.WsFederationConfiguration"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_MetadataAddress",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_MetadataAddress",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ConfigurationManager",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Protocols.IConfigurationManager<Microsoft.IdentityModel.Protocols.WsFederation.WsFederationConfiguration>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ConfigurationManager",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Protocols.IConfigurationManager<Microsoft.IdentityModel.Protocols.WsFederation.WsFederationConfiguration>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RefreshOnIssuerKeyNotFound",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RefreshOnIssuerKeyNotFound",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SkipUnrecognizedRequests",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SkipUnrecognizedRequests",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationEvents",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SecurityTokenHandlers",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.ICollection<Microsoft.IdentityModel.Tokens.ISecurityTokenValidator>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SecurityTokenHandlers",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Collections.Generic.ICollection<Microsoft.IdentityModel.Tokens.ISecurityTokenValidator>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_StateDataFormat",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationProperties>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_StateDataFormat",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationProperties>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_TokenValidationParameters",
-          "Parameters": [],
-          "ReturnType": "Microsoft.IdentityModel.Tokens.TokenValidationParameters",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_TokenValidationParameters",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.IdentityModel.Tokens.TokenValidationParameters"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Wreply",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Wreply",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SignOutWreply",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SignOutWreply",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Wtrealm",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Wtrealm",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_UseTokenLifetime",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_UseTokenLifetime",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RequireHttpsMetadata",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RequireHttpsMetadata",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AllowUnsolicitedLogins",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AllowUnsolicitedLogins",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RemoteSignOutPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RemoteSignOutPath",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.PathString"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SignOutScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SignOutScheme",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationPostConfigureOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "PostConfigure",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Extensions.Options.IPostConfigureOptions<Microsoft.AspNetCore.Authentication.WsFederation.WsFederationOptions>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "dataProtection",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/AuthAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authentication/AuthAppBuilderExtensions.cs
deleted file mode 100644
index 771601ed1..000000000
--- a/src/Microsoft.AspNetCore.Authentication/AuthAppBuilderExtensions.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add authentication capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class AuthAppBuilderExtensions
-    {
-        /// <summary>
-        /// Adds the <see cref="AuthenticationMiddleware"/> to the specified <see cref="IApplicationBuilder"/>, which enables authentication capabilities.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the middleware to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public static IApplicationBuilder UseAuthentication(this IApplicationBuilder app)
-        {
-            if (app == null)
-            {
-                throw new ArgumentNullException(nameof(app));
-            }
-            
-            return app.UseMiddleware<AuthenticationMiddleware>();
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/AuthenticationBuilder.cs b/src/Microsoft.AspNetCore.Authentication/AuthenticationBuilder.cs
deleted file mode 100644
index 401b1f488..000000000
--- a/src/Microsoft.AspNetCore.Authentication/AuthenticationBuilder.cs
+++ /dev/null
@@ -1,120 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Used to configure authentication
-    /// </summary>
-    public class AuthenticationBuilder
-    {
-        /// <summary>
-        /// Constructor.
-        /// </summary>
-        /// <param name="services">The services being configured.</param>
-        public AuthenticationBuilder(IServiceCollection services)
-            => Services = services;
-
-        /// <summary>
-        /// The services being configured.
-        /// </summary>
-        public virtual IServiceCollection Services { get; }
-
-
-        private AuthenticationBuilder AddSchemeHelper<TOptions, THandler>(string authenticationScheme, string displayName, Action<TOptions> configureOptions)
-            where TOptions : class, new()
-            where THandler : class, IAuthenticationHandler
-        {
-            Services.Configure<AuthenticationOptions>(o =>
-            {
-                o.AddScheme(authenticationScheme, scheme => {
-                    scheme.HandlerType = typeof(THandler);
-                    scheme.DisplayName = displayName;
-                });
-            });
-            if (configureOptions != null)
-            {
-                Services.Configure(authenticationScheme, configureOptions);
-            }
-            Services.AddTransient<THandler>();
-            return this;
-        }
-
-        /// <summary>
-        /// Adds a <see cref="AuthenticationScheme"/> which can be used by <see cref="IAuthenticationService"/>.
-        /// </summary>
-        /// <typeparam name="TOptions">The <see cref="AuthenticationSchemeOptions"/> type to configure the handler."/>.</typeparam>
-        /// <typeparam name="THandler">The <see cref="AuthenticationHandler{TOptions}"/> used to handle this scheme.</typeparam>
-        /// <param name="authenticationScheme">The name of this scheme.</param>
-        /// <param name="displayName">The display name of this scheme.</param>
-        /// <param name="configureOptions">Used to configure the scheme options.</param>
-        /// <returns>The builder.</returns>
-        public virtual AuthenticationBuilder AddScheme<TOptions, THandler>(string authenticationScheme, string displayName, Action<TOptions> configureOptions)
-            where TOptions : AuthenticationSchemeOptions, new()
-            where THandler : AuthenticationHandler<TOptions>
-            => AddSchemeHelper<TOptions, THandler>(authenticationScheme, displayName, configureOptions);
-
-        /// <summary>
-        /// Adds a <see cref="AuthenticationScheme"/> which can be used by <see cref="IAuthenticationService"/>.
-        /// </summary>
-        /// <typeparam name="TOptions">The <see cref="AuthenticationSchemeOptions"/> type to configure the handler."/>.</typeparam>
-        /// <typeparam name="THandler">The <see cref="AuthenticationHandler{TOptions}"/> used to handle this scheme.</typeparam>
-        /// <param name="authenticationScheme">The name of this scheme.</param>
-        /// <param name="configureOptions">Used to configure the scheme options.</param>
-        /// <returns>The builder.</returns>
-        public virtual AuthenticationBuilder AddScheme<TOptions, THandler>(string authenticationScheme, Action<TOptions> configureOptions)
-            where TOptions : AuthenticationSchemeOptions, new()
-            where THandler : AuthenticationHandler<TOptions>
-            => AddScheme<TOptions, THandler>(authenticationScheme, displayName: null, configureOptions: configureOptions);
-
-        /// <summary>
-        /// Adds a <see cref="RemoteAuthenticationHandler{TOptions}"/> based <see cref="AuthenticationScheme"/> that supports remote authentication
-        /// which can be used by <see cref="IAuthenticationService"/>.
-        /// </summary>
-        /// <typeparam name="TOptions">The <see cref="RemoteAuthenticationOptions"/> type to configure the handler."/>.</typeparam>
-        /// <typeparam name="THandler">The <see cref="RemoteAuthenticationHandler{TOptions}"/> used to handle this scheme.</typeparam>
-        /// <param name="authenticationScheme">The name of this scheme.</param>
-        /// <param name="displayName">The display name of this scheme.</param>
-        /// <param name="configureOptions">Used to configure the scheme options.</param>
-        /// <returns>The builder.</returns>
-        public virtual AuthenticationBuilder AddRemoteScheme<TOptions, THandler>(string authenticationScheme, string displayName, Action<TOptions> configureOptions)
-            where TOptions : RemoteAuthenticationOptions, new()
-            where THandler : RemoteAuthenticationHandler<TOptions>
-        {
-            Services.TryAddEnumerable(ServiceDescriptor.Singleton<IPostConfigureOptions<TOptions>, EnsureSignInScheme<TOptions>>());
-            return AddScheme<TOptions, THandler>(authenticationScheme, displayName, configureOptions: configureOptions);
-        }
-
-        /// <summary>
-        /// Adds a <see cref="PolicySchemeHandler"/> based authentication handler which can be used to 
-        /// redirect to other authentication schemes.
-        /// </summary>
-        /// <param name="authenticationScheme">The name of this scheme.</param>
-        /// <param name="displayName">The display name of this scheme.</param>
-        /// <param name="configureOptions">Used to configure the scheme options.</param>
-        /// <returns>The builder.</returns>
-        public virtual AuthenticationBuilder AddPolicyScheme(string authenticationScheme, string displayName, Action<PolicySchemeOptions> configureOptions)
-            => AddSchemeHelper<PolicySchemeOptions, PolicySchemeHandler>(authenticationScheme, displayName, configureOptions);
-
-        // Used to ensure that there's always a default sign in scheme that's not itself
-        private class EnsureSignInScheme<TOptions> : IPostConfigureOptions<TOptions> where TOptions : RemoteAuthenticationOptions
-        {
-            private readonly AuthenticationOptions _authOptions;
-
-            public EnsureSignInScheme(IOptions<AuthenticationOptions> authOptions)
-            {
-                _authOptions = authOptions.Value;
-            }
-
-            public void PostConfigure(string name, TOptions options)
-            {
-                options.SignInScheme = options.SignInScheme ?? _authOptions.DefaultSignInScheme ?? _authOptions.DefaultScheme;
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/AuthenticationHandler.cs b/src/Microsoft.AspNetCore.Authentication/AuthenticationHandler.cs
deleted file mode 100644
index 5c9a6473f..000000000
--- a/src/Microsoft.AspNetCore.Authentication/AuthenticationHandler.cs
+++ /dev/null
@@ -1,244 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public abstract class AuthenticationHandler<TOptions> : IAuthenticationHandler where TOptions : AuthenticationSchemeOptions, new()
-    {
-        private Task<AuthenticateResult> _authenticateTask;
-
-        public AuthenticationScheme Scheme { get; private set; }
-        public TOptions Options { get; private set; }
-        protected HttpContext Context { get; private set; }
-
-        protected HttpRequest Request
-        {
-            get => Context.Request;
-        }
-
-        protected HttpResponse Response
-        {
-            get => Context.Response;
-        }
-
-        protected PathString OriginalPath => Context.Features.Get<IAuthenticationFeature>()?.OriginalPath ?? Request.Path;
-
-        protected PathString OriginalPathBase => Context.Features.Get<IAuthenticationFeature>()?.OriginalPathBase ?? Request.PathBase;
-
-        protected ILogger Logger { get; }
-
-        protected UrlEncoder UrlEncoder { get; }
-
-        protected ISystemClock Clock { get; }
-
-        protected IOptionsMonitor<TOptions> OptionsMonitor { get; }
-
-        /// <summary>
-        /// The handler calls methods on the events which give the application control at certain points where processing is occurring. 
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        protected virtual object Events { get; set; }
-
-        protected virtual string ClaimsIssuer => Options.ClaimsIssuer ?? Scheme.Name;
-
-        protected string CurrentUri
-        {
-            get => Request.Scheme + "://" + Request.Host + Request.PathBase + Request.Path + Request.QueryString;
-        }
-
-        protected AuthenticationHandler(IOptionsMonitor<TOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-        {
-            Logger = logger.CreateLogger(this.GetType().FullName);
-            UrlEncoder = encoder;
-            Clock = clock;
-            OptionsMonitor = options;
-        }
-
-        /// <summary>
-        /// Initialize the handler, resolve the options and validate them.
-        /// </summary>
-        /// <param name="scheme"></param>
-        /// <param name="context"></param>
-        /// <returns></returns>
-        public async Task InitializeAsync(AuthenticationScheme scheme, HttpContext context)
-        {
-            if (scheme == null)
-            {
-                throw new ArgumentNullException(nameof(scheme));
-            }
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-
-            Scheme = scheme;
-            Context = context;
-
-            Options = OptionsMonitor.Get(Scheme.Name) ?? new TOptions();
-            Options.Validate(Scheme.Name);
-
-            await InitializeEventsAsync();
-            await InitializeHandlerAsync();
-        }
-
-        /// <summary>
-        /// Initializes the events object, called once per request by <see cref="InitializeAsync(AuthenticationScheme, HttpContext)"/>.
-        /// </summary>
-        protected virtual async Task InitializeEventsAsync()
-        {
-            Events = Options.Events;
-            if (Options.EventsType != null)
-            {
-                Events = Context.RequestServices.GetRequiredService(Options.EventsType);
-            }
-            Events = Events ?? await CreateEventsAsync();
-        }
-
-        /// <summary>
-        /// Creates a new instance of the events instance.
-        /// </summary>
-        /// <returns>A new instance of the events instance.</returns>
-        protected virtual Task<object> CreateEventsAsync() => Task.FromResult(new object());
-
-        /// <summary>
-        /// Called after options/events have been initialized for the handler to finish initializing itself.
-        /// </summary>
-        /// <returns>A task</returns>
-        protected virtual Task InitializeHandlerAsync() => Task.CompletedTask;
-
-        protected string BuildRedirectUri(string targetPath)
-            => Request.Scheme + "://" + Request.Host + OriginalPathBase + targetPath;
-
-        protected virtual string ResolveTarget(string scheme)
-        {
-            var target = scheme ?? Options.ForwardDefaultSelector?.Invoke(Context) ?? Options.ForwardDefault;
-
-            // Prevent self targetting
-            return string.Equals(target, Scheme.Name, StringComparison.Ordinal)
-                ? null
-                : target;
-        }
-
-        public async Task<AuthenticateResult> AuthenticateAsync()
-        {
-            var target = ResolveTarget(Options.ForwardAuthenticate);
-            if (target != null)
-            {
-                return await Context.AuthenticateAsync(target);
-            }
-
-            // Calling Authenticate more than once should always return the original value.
-            var result = await HandleAuthenticateOnceAsync();
-            if (result?.Failure == null)
-            {
-                var ticket = result?.Ticket;
-                if (ticket?.Principal != null)
-                {
-                    Logger.AuthenticationSchemeAuthenticated(Scheme.Name);
-                }
-                else
-                {
-                    Logger.AuthenticationSchemeNotAuthenticated(Scheme.Name);
-                }
-            }
-            else
-            {
-                Logger.AuthenticationSchemeNotAuthenticatedWithFailure(Scheme.Name, result.Failure.Message);
-            }
-            return result;
-        }
-
-        /// <summary>
-        /// Used to ensure HandleAuthenticateAsync is only invoked once. The subsequent calls
-        /// will return the same authenticate result.
-        /// </summary>
-        protected Task<AuthenticateResult> HandleAuthenticateOnceAsync()
-        {
-            if (_authenticateTask == null)
-            {
-                _authenticateTask = HandleAuthenticateAsync();
-            }
-
-            return _authenticateTask;
-        }
-
-        /// <summary>
-        /// Used to ensure HandleAuthenticateAsync is only invoked once safely. The subsequent
-        /// calls will return the same authentication result. Any exceptions will be converted
-        /// into a failed authentication result containing the exception.
-        /// </summary>
-        protected async Task<AuthenticateResult> HandleAuthenticateOnceSafeAsync()
-        {
-            try
-            {
-                return await HandleAuthenticateOnceAsync();
-            }
-            catch (Exception ex)
-            {
-                return AuthenticateResult.Fail(ex);
-            }
-        }
-
-        protected abstract Task<AuthenticateResult> HandleAuthenticateAsync();
-
-        /// <summary>
-        /// Override this method to handle Forbid.
-        /// </summary>
-        /// <param name="properties"></param>
-        /// <returns>A Task.</returns>
-        protected virtual Task HandleForbiddenAsync(AuthenticationProperties properties)
-        {
-            Response.StatusCode = 403;
-            return Task.CompletedTask;
-        }
-
-        /// <summary>
-        /// Override this method to deal with 401 challenge concerns, if an authentication scheme in question
-        /// deals an authentication interaction as part of it's request flow. (like adding a response header, or
-        /// changing the 401 result to 302 of a login page or external sign-in location.)
-        /// </summary>
-        /// <param name="properties"></param>
-        /// <returns>A Task.</returns>
-        protected virtual Task HandleChallengeAsync(AuthenticationProperties properties)
-        {
-            Response.StatusCode = 401;
-            return Task.CompletedTask;
-        }
-
-        public async Task ChallengeAsync(AuthenticationProperties properties)
-        {
-            var target = ResolveTarget(Options.ForwardChallenge);
-            if (target != null)
-            {
-                await Context.ChallengeAsync(target, properties);
-                return;
-            }
-
-            properties = properties ?? new AuthenticationProperties();
-            await HandleChallengeAsync(properties);
-            Logger.AuthenticationSchemeChallenged(Scheme.Name);
-        }
-
-        public async Task ForbidAsync(AuthenticationProperties properties)
-        {
-            var target = ResolveTarget(Options.ForwardForbid);
-            if (target != null)
-            {
-                await Context.ForbidAsync(target, properties);
-                return;
-            }
-
-            properties = properties ?? new AuthenticationProperties();
-            await HandleForbiddenAsync(properties);
-            Logger.AuthenticationSchemeForbidden(Scheme.Name);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/AuthenticationMiddleware.cs b/src/Microsoft.AspNetCore.Authentication/AuthenticationMiddleware.cs
deleted file mode 100644
index 0c62cc3c3..000000000
--- a/src/Microsoft.AspNetCore.Authentication/AuthenticationMiddleware.cs
+++ /dev/null
@@ -1,64 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.DependencyInjection;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class AuthenticationMiddleware
-    {
-        private readonly RequestDelegate _next;
-
-        public AuthenticationMiddleware(RequestDelegate next, IAuthenticationSchemeProvider schemes)
-        {
-            if (next == null)
-            {
-                throw new ArgumentNullException(nameof(next));
-            }
-            if (schemes == null)
-            {
-                throw new ArgumentNullException(nameof(schemes));
-            }
-
-            _next = next;
-            Schemes = schemes;
-        }
-
-        public IAuthenticationSchemeProvider Schemes { get; set; }
-
-        public async Task Invoke(HttpContext context)
-        {
-            context.Features.Set<IAuthenticationFeature>(new AuthenticationFeature
-            {
-                OriginalPath = context.Request.Path,
-                OriginalPathBase = context.Request.PathBase
-            });
-
-            // Give any IAuthenticationRequestHandler schemes a chance to handle the request
-            var handlers = context.RequestServices.GetRequiredService<IAuthenticationHandlerProvider>();
-            foreach (var scheme in await Schemes.GetRequestHandlerSchemesAsync())
-            {
-                var handler = await handlers.GetHandlerAsync(context, scheme.Name) as IAuthenticationRequestHandler;
-                if (handler != null && await handler.HandleRequestAsync())
-                {
-                    return;
-                }
-            }
-
-            var defaultAuthenticate = await Schemes.GetDefaultAuthenticateSchemeAsync();
-            if (defaultAuthenticate != null)
-            {
-                var result = await context.AuthenticateAsync(defaultAuthenticate.Name);
-                if (result?.Principal != null)
-                {
-                    context.User = result.Principal;
-                }
-            }
-
-            await _next(context);
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/AuthenticationSchemeOptions.cs b/src/Microsoft.AspNetCore.Authentication/AuthenticationSchemeOptions.cs
deleted file mode 100644
index a547d203b..000000000
--- a/src/Microsoft.AspNetCore.Authentication/AuthenticationSchemeOptions.cs
+++ /dev/null
@@ -1,93 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Contains the options used by the <see cref="AuthenticationHandler{T}"/>.
-    /// </summary>
-    public class AuthenticationSchemeOptions
-    {
-        /// <summary>
-        /// Check that the options are valid. Should throw an exception if things are not ok.
-        /// </summary>
-        public virtual void Validate() { }
-
-        /// <summary>
-        /// Checks that the options are valid for a specific scheme
-        /// </summary>
-        /// <param name="scheme">The scheme being validated.</param>
-        public virtual void Validate(string scheme)
-            => Validate();
-
-        /// <summary>
-        /// Gets or sets the issuer that should be used for any claims that are created
-        /// </summary>
-        public string ClaimsIssuer { get; set; }
-
-        /// <summary>
-        /// Instance used for events
-        /// </summary>
-        public object Events { get; set; }
-
-        /// <summary>
-        /// If set, will be used as the service type to get the Events instance instead of the property.
-        /// </summary>
-        public Type EventsType { get; set; }
-
-        /// <summary>
-        /// If set, this specifies a default scheme that authentication handlers should forward all authentication operations to
-        /// by default. The default forwarding logic will check the most specific ForwardAuthenticate/Challenge/Forbid/SignIn/SignOut 
-        /// setting first, followed by checking the ForwardDefaultSelector, followed by ForwardDefault. The first non null result
-        /// will be used as the target scheme to forward to.
-        /// </summary>
-        public string ForwardDefault { get; set; }
-
-        /// <summary>
-        /// If set, this specifies the target scheme that this scheme should forward AuthenticateAsync calls to.
-        /// For example Context.AuthenticateAsync("ThisScheme") => Context.AuthenticateAsync("ForwardAuthenticateValue");
-        /// Set the target to the current scheme to disable forwarding and allow normal processing.
-        /// </summary>
-        public string ForwardAuthenticate { get; set; }
-
-        /// <summary>
-        /// If set, this specifies the target scheme that this scheme should forward ChallengeAsync calls to.
-        /// For example Context.ChallengeAsync("ThisScheme") => Context.ChallengeAsync("ForwardChallengeValue");
-        /// Set the target to the current scheme to disable forwarding and allow normal processing.
-        /// </summary>
-        public string ForwardChallenge { get; set; }
-
-        /// <summary>
-        /// If set, this specifies the target scheme that this scheme should forward ForbidAsync calls to.
-        /// For example Context.ForbidAsync("ThisScheme") => Context.ForbidAsync("ForwardForbidValue");
-        /// Set the target to the current scheme to disable forwarding and allow normal processing.
-        /// </summary>
-        public string ForwardForbid { get; set; }
-
-        /// <summary>
-        /// If set, this specifies the target scheme that this scheme should forward SignInAsync calls to.
-        /// For example Context.SignInAsync("ThisScheme") => Context.SignInAsync("ForwardSignInValue");
-        /// Set the target to the current scheme to disable forwarding and allow normal processing.
-        /// </summary>
-        public string ForwardSignIn { get; set; }
-
-        /// <summary>
-        /// If set, this specifies the target scheme that this scheme should forward SignOutAsync calls to.
-        /// For example Context.SignOutAsync("ThisScheme") => Context.SignInAsync("ForwardSignOutValue");
-        /// Set the target to the current scheme to disable forwarding and allow normal processing.
-        /// </summary>
-        public string ForwardSignOut { get; set; }
-
-        /// <summary>
-        /// Used to select a default scheme for the current request that authentication handlers should forward all authentication operations to
-        /// by default. The default forwarding logic will check the most specific ForwardAuthenticate/Challenge/Forbid/SignIn/SignOut 
-        /// setting first, followed by checking the ForwardDefaultSelector, followed by ForwardDefault. The first non null result
-        /// will be used as the target scheme to forward to.
-        /// </summary>
-        public Func<HttpContext, string> ForwardDefaultSelector { get; set; }
-
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/AuthenticationServiceCollectionExtensions.cs b/src/Microsoft.AspNetCore.Authentication/AuthenticationServiceCollectionExtensions.cs
deleted file mode 100644
index 6c381b84a..000000000
--- a/src/Microsoft.AspNetCore.Authentication/AuthenticationServiceCollectionExtensions.cs
+++ /dev/null
@@ -1,66 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    /// <summary>
-    /// Extension methods for setting up authentication services in an <see cref="IServiceCollection" />.
-    /// </summary>
-    public static class AuthenticationServiceCollectionExtensions
-    {
-        public static AuthenticationBuilder AddAuthentication(this IServiceCollection services)
-        {
-            if (services == null)
-            {
-                throw new ArgumentNullException(nameof(services));
-            }
-
-            services.AddAuthenticationCore();
-            services.AddDataProtection();
-            services.AddWebEncoders();
-            services.TryAddSingleton<ISystemClock, SystemClock>();
-            return new AuthenticationBuilder(services);
-        }
-
-        public static AuthenticationBuilder AddAuthentication(this IServiceCollection services, string defaultScheme)
-            => services.AddAuthentication(o => o.DefaultScheme = defaultScheme);
-
-        public static AuthenticationBuilder AddAuthentication(this IServiceCollection services, Action<AuthenticationOptions> configureOptions) {
-            if (services == null)
-            {
-                throw new ArgumentNullException(nameof(services));
-            }
-
-            if (configureOptions == null)
-            {
-                throw new ArgumentNullException(nameof(configureOptions));
-            }
-
-            var builder = services.AddAuthentication();
-            services.Configure(configureOptions);
-            return builder;
-        }
-
-        // Used to ensure that there's always a sign in scheme
-        private class EnsureSignInScheme<TOptions> : IPostConfigureOptions<TOptions> where TOptions : RemoteAuthenticationOptions
-        {
-            private readonly AuthenticationOptions _authOptions;
-
-            public EnsureSignInScheme(IOptions<AuthenticationOptions> authOptions)
-            {
-                _authOptions = authOptions.Value;
-            }
-
-            public void PostConfigure(string name, TOptions options)
-            {
-                options.SignInScheme = options.SignInScheme ?? _authOptions.DefaultSignInScheme;
-            }
-        }
-
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Data/IDataSerializer.cs b/src/Microsoft.AspNetCore.Authentication/Data/IDataSerializer.cs
deleted file mode 100644
index ad9c52300..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Data/IDataSerializer.cs
+++ /dev/null
@@ -1,11 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public interface IDataSerializer<TModel>
-    {
-        byte[] Serialize(TModel model);
-        TModel Deserialize(byte[] data);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Data/ISecureDataFormat.cs b/src/Microsoft.AspNetCore.Authentication/Data/ISecureDataFormat.cs
deleted file mode 100644
index 73b1b882b..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Data/ISecureDataFormat.cs
+++ /dev/null
@@ -1,13 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public interface ISecureDataFormat<TData>
-    {
-        string Protect(TData data);
-        string Protect(TData data, string purpose);
-        TData Unprotect(string protectedText);
-        TData Unprotect(string protectedText, string purpose);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Data/PropertiesDataFormat.cs b/src/Microsoft.AspNetCore.Authentication/Data/PropertiesDataFormat.cs
deleted file mode 100644
index 3d31e4bd2..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Data/PropertiesDataFormat.cs
+++ /dev/null
@@ -1,16 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Http.Authentication;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class PropertiesDataFormat : SecureDataFormat<AuthenticationProperties>
-    {
-        public PropertiesDataFormat(IDataProtector protector)
-            : base(new PropertiesSerializer(), protector)
-        {
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Data/PropertiesSerializer.cs b/src/Microsoft.AspNetCore.Authentication/Data/PropertiesSerializer.cs
deleted file mode 100644
index dd30b45ae..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Data/PropertiesSerializer.cs
+++ /dev/null
@@ -1,87 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.IO;
-using Microsoft.AspNetCore.Http.Authentication;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class PropertiesSerializer : IDataSerializer<AuthenticationProperties>
-    {
-        private const int FormatVersion = 1;
-
-        public static PropertiesSerializer Default { get; } = new PropertiesSerializer();
-
-        public virtual byte[] Serialize(AuthenticationProperties model)
-        {
-            using (var memory = new MemoryStream())
-            {
-                using (var writer = new BinaryWriter(memory))
-                {
-                    Write(writer, model);
-                    writer.Flush();
-                    return memory.ToArray();
-                }
-            }
-        }
-
-        public virtual AuthenticationProperties Deserialize(byte[] data)
-        {
-            using (var memory = new MemoryStream(data))
-            {
-                using (var reader = new BinaryReader(memory))
-                {
-                    return Read(reader);
-                }
-            }
-        }
-
-        public virtual void Write(BinaryWriter writer, AuthenticationProperties properties)
-        {
-            if (writer == null)
-            {
-                throw new ArgumentNullException(nameof(writer));
-            }
-
-            if (properties == null)
-            {
-                throw new ArgumentNullException(nameof(properties));
-            }
-
-            writer.Write(FormatVersion);
-            writer.Write(properties.Items.Count);
-
-            foreach (var item in properties.Items)
-            {
-                writer.Write(item.Key ?? string.Empty);
-                writer.Write(item.Value ?? string.Empty);
-            }
-        }
-
-        public virtual AuthenticationProperties Read(BinaryReader reader)
-        {
-            if (reader == null)
-            {
-                throw new ArgumentNullException(nameof(reader));
-            }
-
-            if (reader.ReadInt32() != FormatVersion)
-            {
-                return null;
-            }
-
-            var count = reader.ReadInt32();
-            var extra = new Dictionary<string, string>(count);
-
-            for (var index = 0; index != count; ++index)
-            {
-                string key = reader.ReadString();
-                string value = reader.ReadString();
-                extra.Add(key, value);
-            }
-            return new AuthenticationProperties(extra);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Data/SecureDataFormat.cs b/src/Microsoft.AspNetCore.Authentication/Data/SecureDataFormat.cs
deleted file mode 100644
index f35025d8b..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Data/SecureDataFormat.cs
+++ /dev/null
@@ -1,79 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.DataProtection;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class SecureDataFormat<TData> : ISecureDataFormat<TData>
-    {
-        private readonly IDataSerializer<TData> _serializer;
-        private readonly IDataProtector _protector;
-
-        public SecureDataFormat(IDataSerializer<TData> serializer, IDataProtector protector)
-        {
-            _serializer = serializer;
-            _protector = protector;
-        }
-
-        public string Protect(TData data)
-        {
-            return Protect(data, purpose: null);
-        }
-
-        public string Protect(TData data, string purpose)
-        {
-            var userData = _serializer.Serialize(data);
-
-            var protector = _protector;
-            if (!string.IsNullOrEmpty(purpose))
-            {
-                protector = protector.CreateProtector(purpose);
-            }
-
-            var protectedData = protector.Protect(userData);
-            return Base64UrlTextEncoder.Encode(protectedData);
-        }
-
-        public TData Unprotect(string protectedText)
-        {
-            return Unprotect(protectedText, purpose: null);
-        }
-
-        public TData Unprotect(string protectedText, string purpose)
-        {
-            try
-            {
-                if (protectedText == null)
-                {
-                    return default(TData);
-                }
-
-                var protectedData = Base64UrlTextEncoder.Decode(protectedText);
-                if (protectedData == null)
-                {
-                    return default(TData);
-                }
-
-                var protector = _protector;
-                if (!string.IsNullOrEmpty(purpose))
-                {
-                    protector = protector.CreateProtector(purpose);
-                }
-
-                var userData = protector.Unprotect(protectedData);
-                if (userData == null)
-                {
-                    return default(TData);
-                }
-
-                return _serializer.Deserialize(userData);
-            }
-            catch
-            {
-                // TODO trace exception, but do not leak other information
-                return default(TData);
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/Data/TextEncoder.cs b/src/Microsoft.AspNetCore.Authentication/Data/TextEncoder.cs
deleted file mode 100644
index 1f7ecc718..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Data/TextEncoder.cs
+++ /dev/null
@@ -1,30 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public static class Base64UrlTextEncoder
-    {
-        /// <summary>
-        /// Encodes supplied data into Base64 and replaces any URL encodable characters into non-URL encodable
-        /// characters.
-        /// </summary>
-        /// <param name="data">Data to be encoded.</param>
-        /// <returns>Base64 encoded string modified with non-URL encodable characters</returns>
-        public static string Encode(byte[] data)
-        {
-            return WebUtilities.WebEncoders.Base64UrlEncode(data);
-        }
-
-        /// <summary>
-        /// Decodes supplied string by replacing the non-URL encodable characters with URL encodable characters and
-        /// then decodes the Base64 string.
-        /// </summary>
-        /// <param name="text">The string to be decoded.</param>
-        /// <returns>The decoded data.</returns>
-        public static byte[] Decode(string text)
-        {
-            return WebUtilities.WebEncoders.Base64UrlDecode(text);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Data/TicketDataFormat.cs b/src/Microsoft.AspNetCore.Authentication/Data/TicketDataFormat.cs
deleted file mode 100644
index e43943cfc..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Data/TicketDataFormat.cs
+++ /dev/null
@@ -1,15 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.DataProtection;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class TicketDataFormat : SecureDataFormat<AuthenticationTicket>
-    {
-        public TicketDataFormat(IDataProtector protector)
-            : base(TicketSerializer.Default, protector)
-        {
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Data/TicketSerializer.cs b/src/Microsoft.AspNetCore.Authentication/Data/TicketSerializer.cs
deleted file mode 100644
index e33ec7172..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Data/TicketSerializer.cs
+++ /dev/null
@@ -1,275 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.IO;
-using System.Linq;
-using System.Security.Claims;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    // This MUST be kept in sync with Microsoft.Owin.Security.Interop.AspNetTicketSerializer
-    public class TicketSerializer : IDataSerializer<AuthenticationTicket>
-    {
-        private const string DefaultStringPlaceholder = "\0";
-        private const int FormatVersion = 5;
-
-        public static TicketSerializer Default { get; } = new TicketSerializer();
-
-        public virtual byte[] Serialize(AuthenticationTicket ticket)
-        {
-            using (var memory = new MemoryStream())
-            {
-                using (var writer = new BinaryWriter(memory))
-                {
-                    Write(writer, ticket);
-                }
-                return memory.ToArray();
-            }
-        }
-
-        public virtual AuthenticationTicket Deserialize(byte[] data)
-        {
-            using (var memory = new MemoryStream(data))
-            {
-                using (var reader = new BinaryReader(memory))
-                {
-                    return Read(reader);
-                }
-            }
-        }
-
-        public virtual void Write(BinaryWriter writer, AuthenticationTicket ticket)
-        {
-            if (writer == null)
-            {
-                throw new ArgumentNullException(nameof(writer));
-            }
-
-            if (ticket == null)
-            {
-                throw new ArgumentNullException(nameof(ticket));
-            }
-
-            writer.Write(FormatVersion);
-            writer.Write(ticket.AuthenticationScheme);
-
-            // Write the number of identities contained in the principal.
-            var principal = ticket.Principal;
-            writer.Write(principal.Identities.Count());
-
-            foreach (var identity in principal.Identities)
-            {
-                WriteIdentity(writer, identity);
-            }
-
-            PropertiesSerializer.Default.Write(writer, ticket.Properties);
-        }
-
-        protected virtual void WriteIdentity(BinaryWriter writer, ClaimsIdentity identity)
-        {
-            if (writer == null)
-            {
-                throw new ArgumentNullException(nameof(writer));
-            }
-
-            if (identity == null)
-            {
-                throw new ArgumentNullException(nameof(identity));
-            }
-
-            var authenticationType = identity.AuthenticationType ?? string.Empty;
-
-            writer.Write(authenticationType);
-            WriteWithDefault(writer, identity.NameClaimType, ClaimsIdentity.DefaultNameClaimType);
-            WriteWithDefault(writer, identity.RoleClaimType, ClaimsIdentity.DefaultRoleClaimType);
-
-            // Write the number of claims contained in the identity.
-            writer.Write(identity.Claims.Count());
-
-            foreach (var claim in identity.Claims)
-            {
-                WriteClaim(writer, claim);
-            }
-
-            var bootstrap = identity.BootstrapContext as string;
-            if (!string.IsNullOrEmpty(bootstrap))
-            {
-                writer.Write(true);
-                writer.Write(bootstrap);
-            }
-            else
-            {
-                writer.Write(false);
-            }
-
-            if (identity.Actor != null)
-            {
-                writer.Write(true);
-                WriteIdentity(writer, identity.Actor);
-            }
-            else
-            {
-                writer.Write(false);
-            }
-        }
-
-        protected virtual void WriteClaim(BinaryWriter writer, Claim claim)
-        {
-            if (writer == null)
-            {
-                throw new ArgumentNullException(nameof(writer));
-            }
-
-            if (claim == null)
-            {
-                throw new ArgumentNullException(nameof(claim));
-            }
-
-            WriteWithDefault(writer, claim.Type, claim.Subject?.NameClaimType ?? ClaimsIdentity.DefaultNameClaimType);
-            writer.Write(claim.Value);
-            WriteWithDefault(writer, claim.ValueType, ClaimValueTypes.String);
-            WriteWithDefault(writer, claim.Issuer, ClaimsIdentity.DefaultIssuer);
-            WriteWithDefault(writer, claim.OriginalIssuer, claim.Issuer);
-
-            // Write the number of properties contained in the claim.
-            writer.Write(claim.Properties.Count);
-
-            foreach (var property in claim.Properties)
-            {
-                writer.Write(property.Key ?? string.Empty);
-                writer.Write(property.Value ?? string.Empty);
-            }
-        }
-
-        public virtual AuthenticationTicket Read(BinaryReader reader)
-        {
-            if (reader == null)
-            {
-                throw new ArgumentNullException(nameof(reader));
-            }
-
-            if (reader.ReadInt32() != FormatVersion)
-            {
-                return null;
-            }
-
-            var scheme = reader.ReadString();
-
-            // Read the number of identities stored
-            // in the serialized payload.
-            var count = reader.ReadInt32();
-            if (count < 0)
-            {
-                return null;
-            }
-
-            var identities = new ClaimsIdentity[count];
-            for (var index = 0; index != count; ++index)
-            {
-                identities[index] = ReadIdentity(reader);
-            }
-
-            var properties = PropertiesSerializer.Default.Read(reader);
-
-            return new AuthenticationTicket(new ClaimsPrincipal(identities), properties, scheme);
-        }
-
-        protected virtual ClaimsIdentity ReadIdentity(BinaryReader reader)
-        {
-            if (reader == null)
-            {
-                throw new ArgumentNullException(nameof(reader));
-            }
-
-            var authenticationType = reader.ReadString();
-            var nameClaimType = ReadWithDefault(reader, ClaimsIdentity.DefaultNameClaimType);
-            var roleClaimType = ReadWithDefault(reader, ClaimsIdentity.DefaultRoleClaimType);
-
-            // Read the number of claims contained
-            // in the serialized identity.
-            var count = reader.ReadInt32();
-
-            var identity = new ClaimsIdentity(authenticationType, nameClaimType, roleClaimType);
-
-            for (int index = 0; index != count; ++index)
-            {
-                var claim = ReadClaim(reader, identity);
-
-                identity.AddClaim(claim);
-            }
-
-            // Determine whether the identity
-            // has a bootstrap context attached.
-            if (reader.ReadBoolean())
-            {
-                identity.BootstrapContext = reader.ReadString();
-            }
-
-            // Determine whether the identity
-            // has an actor identity attached.
-            if (reader.ReadBoolean())
-            {
-                identity.Actor = ReadIdentity(reader);
-            }
-
-            return identity;
-        }
-
-        protected virtual Claim ReadClaim(BinaryReader reader, ClaimsIdentity identity)
-        {
-            if (reader == null)
-            {
-                throw new ArgumentNullException(nameof(reader));
-            }
-
-            if (identity == null)
-            {
-                throw new ArgumentNullException(nameof(identity));
-            }
-
-            var type = ReadWithDefault(reader, identity.NameClaimType);
-            var value = reader.ReadString();
-            var valueType = ReadWithDefault(reader, ClaimValueTypes.String);
-            var issuer = ReadWithDefault(reader, ClaimsIdentity.DefaultIssuer);
-            var originalIssuer = ReadWithDefault(reader, issuer);
-
-            var claim = new Claim(type, value, valueType, issuer, originalIssuer, identity);
-
-            // Read the number of properties stored in the claim.
-            var count = reader.ReadInt32();
-
-            for (var index = 0; index != count; ++index)
-            {
-                var key = reader.ReadString();
-                var propertyValue = reader.ReadString();
-
-                claim.Properties.Add(key, propertyValue);
-            }
-
-            return claim;
-        }
-
-        private static void WriteWithDefault(BinaryWriter writer, string value, string defaultValue)
-        {
-            if (string.Equals(value, defaultValue, StringComparison.Ordinal))
-            {
-                writer.Write(DefaultStringPlaceholder);
-            }
-            else
-            {
-                writer.Write(value);
-            }
-        }
-
-        private static string ReadWithDefault(BinaryReader reader, string defaultValue)
-        {
-            var value = reader.ReadString();
-            if (string.Equals(value, DefaultStringPlaceholder, StringComparison.Ordinal))
-            {
-                return defaultValue;
-            }
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/AccessDeniedContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/AccessDeniedContext.cs
deleted file mode 100644
index f01d69453..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/AccessDeniedContext.cs
+++ /dev/null
@@ -1,44 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Provides access denied failure context information to handler providers.
-    /// </summary>
-    public class AccessDeniedContext : HandleRequestContext<RemoteAuthenticationOptions>
-    {
-        public AccessDeniedContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            RemoteAuthenticationOptions options)
-            : base(context, scheme, options)
-        {
-        }
-
-        /// <summary>
-        /// Gets or sets the endpoint path the user agent will be redirected to.
-        /// By default, this property is set to <see cref="RemoteAuthenticationOptions.AccessDeniedPath"/>.
-        /// </summary>
-        public PathString AccessDeniedPath { get; set; }
-
-        /// <summary>
-        /// Additional state values for the authentication session.
-        /// </summary>
-        public AuthenticationProperties Properties { get; set; }
-
-        /// <summary>
-        /// Gets or sets the return URL that will be flowed up to the access denied page.
-        /// If <see cref="ReturnUrlParameter"/> is not set, this property is not used.
-        /// </summary>
-        public string ReturnUrl { get; set; }
-
-        /// <summary>
-        /// Gets or sets the parameter name that will be used to flow the return URL.
-        /// By default, this property is set to <see cref="RemoteAuthenticationOptions.ReturnUrlParameter"/>.
-        /// </summary>
-        public string ReturnUrlParameter { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/BaseContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/BaseContext.cs
deleted file mode 100644
index 915fc2377..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/BaseContext.cs
+++ /dev/null
@@ -1,65 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Base class used by other context classes.
-    /// </summary>
-    public abstract class BaseContext<TOptions> where TOptions : AuthenticationSchemeOptions
-    {
-        /// <summary>
-        /// Constructor.
-        /// </summary>
-        /// <param name="context">The context.</param>
-        /// <param name="scheme">The authentication scheme.</param>
-        /// <param name="options">The authentication options associated with the scheme.</param>
-        protected BaseContext(HttpContext context, AuthenticationScheme scheme, TOptions options)
-        {
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-            if (scheme == null)
-            {
-                throw new ArgumentNullException(nameof(scheme));
-            }
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            HttpContext = context;
-            Scheme = scheme;
-            Options = options;
-        }
-
-        /// <summary>
-        /// The authentication scheme.
-        /// </summary>
-        public AuthenticationScheme Scheme { get; }
-
-        /// <summary>
-        /// Gets the authentication options associated with the scheme.
-        /// </summary>
-        public TOptions Options { get; }
-
-        /// <summary>
-        /// The context.
-        /// </summary>
-        public HttpContext HttpContext { get; }
-
-        /// <summary>
-        /// The request.
-        /// </summary>
-        public HttpRequest Request => HttpContext.Request;
-
-        /// <summary>
-        /// The response.
-        /// </summary>
-        public HttpResponse Response => HttpContext.Response;
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/HandleRequestContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/HandleRequestContext.cs
deleted file mode 100644
index 52dd9ce12..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/HandleRequestContext.cs
+++ /dev/null
@@ -1,32 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class HandleRequestContext<TOptions> : BaseContext<TOptions> where TOptions : AuthenticationSchemeOptions
-    {
-        protected HandleRequestContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            TOptions options)
-            : base(context, scheme, options) { }
-
-        /// <summary>
-        /// The <see cref="HandleRequestResult"/> which is used by the handler.
-        /// </summary>
-        public HandleRequestResult Result { get; protected set; }
-
-        /// <summary>
-        /// Discontinue all processing for this request and return to the client.
-        /// The caller is responsible for generating the full response.
-        /// </summary>
-        public void HandleResponse() => Result = HandleRequestResult.Handle();
-
-        /// <summary>
-        /// Discontinue processing the request in the current handler.
-        /// </summary>
-        public void SkipHandler() => Result = HandleRequestResult.SkipHandler();
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/PrincipalContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/PrincipalContext.cs
deleted file mode 100644
index 8bf40760a..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/PrincipalContext.cs
+++ /dev/null
@@ -1,30 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Base context for authentication events which deal with a ClaimsPrincipal.
-    /// </summary>
-    public abstract class PrincipalContext<TOptions> : PropertiesContext<TOptions> where TOptions : AuthenticationSchemeOptions
-    {
-        /// <summary>
-        /// Constructor.
-        /// </summary>
-        /// <param name="context">The context.</param>
-        /// <param name="scheme">The authentication scheme.</param>
-        /// <param name="options">The authentication options associated with the scheme.</param>
-        /// <param name="properties">The authentication properties.</param>
-        protected PrincipalContext(HttpContext context, AuthenticationScheme scheme, TOptions options, AuthenticationProperties properties)
-            : base(context, scheme, options, properties) { }
-
-        /// <summary>
-        /// Gets the <see cref="ClaimsPrincipal"/> containing the user claims.
-        /// </summary>
-        public virtual ClaimsPrincipal Principal { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/PropertiesContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/PropertiesContext.cs
deleted file mode 100644
index f1730d0d7..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/PropertiesContext.cs
+++ /dev/null
@@ -1,31 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Base context for authentication events which contain <see cref="AuthenticationProperties"/>.
-    /// </summary>
-    public abstract class PropertiesContext<TOptions> : BaseContext<TOptions> where TOptions : AuthenticationSchemeOptions
-    {
-        /// <summary>
-        /// Constructor.
-        /// </summary>
-        /// <param name="context">The context.</param>
-        /// <param name="scheme">The authentication scheme.</param>
-        /// <param name="options">The authentication options associated with the scheme.</param>
-        /// <param name="properties">The authentication properties.</param>
-        protected PropertiesContext(HttpContext context, AuthenticationScheme scheme, TOptions options, AuthenticationProperties properties)
-            : base(context, scheme, options)
-        {
-            Properties = properties ?? new AuthenticationProperties();
-        }
-
-        /// <summary>
-        /// Gets or sets the <see cref="AuthenticationProperties"/>.
-        /// </summary>
-        public virtual AuthenticationProperties Properties { get; protected set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/RedirectContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/RedirectContext.cs
deleted file mode 100644
index dac24cafa..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/RedirectContext.cs
+++ /dev/null
@@ -1,38 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Context passed for redirect events.
-    /// </summary>
-    public class RedirectContext<TOptions> : PropertiesContext<TOptions> where TOptions : AuthenticationSchemeOptions
-    {
-        /// <summary>
-        /// Creates a new context object.
-        /// </summary>
-        /// <param name="context">The HTTP request context</param>
-        /// <param name="scheme">The scheme data</param>
-        /// <param name="options">The handler options</param>
-        /// <param name="redirectUri">The initial redirect URI</param>
-        /// <param name="properties">The <see cref="AuthenticationProperties"/>.</param>
-        public RedirectContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            TOptions options,
-            AuthenticationProperties properties,
-            string redirectUri)
-            : base(context, scheme, options, properties)
-        {
-            Properties = properties;
-            RedirectUri = redirectUri;
-        }
-
-        /// <summary>
-        /// Gets or Sets the URI used for the redirect operation.
-        /// </summary>
-        public string RedirectUri { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/RemoteAuthenticationContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/RemoteAuthenticationContext.cs
deleted file mode 100644
index b7a016879..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/RemoteAuthenticationContext.cs
+++ /dev/null
@@ -1,49 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Base context for remote authentication.
-    /// </summary>
-    public abstract class RemoteAuthenticationContext<TOptions> : HandleRequestContext<TOptions> where TOptions : AuthenticationSchemeOptions
-    {
-        /// <summary>
-        /// Constructor.
-        /// </summary>
-        /// <param name="context">The context.</param>
-        /// <param name="scheme">The authentication scheme.</param>
-        /// <param name="options">The authentication options associated with the scheme.</param>
-        /// <param name="properties">The authentication properties.</param>
-        protected RemoteAuthenticationContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            TOptions options,
-            AuthenticationProperties properties)
-            : base(context, scheme, options)
-            => Properties = properties ?? new AuthenticationProperties();
-
-        /// <summary>
-        /// Gets the <see cref="ClaimsPrincipal"/> containing the user claims.
-        /// </summary>
-        public ClaimsPrincipal Principal { get; set; }
-
-        /// <summary>
-        /// Gets or sets the <see cref="AuthenticationProperties"/>.
-        /// </summary>
-        public virtual AuthenticationProperties Properties { get; set; }
-
-        /// <summary>
-        /// Calls success creating a ticket with the <see cref="Principal"/> and <see cref="Properties"/>.
-        /// </summary>
-        public void Success() => Result = HandleRequestResult.Success(new AuthenticationTicket(Principal, Properties, Scheme.Name));
-
-        public void Fail(Exception failure) => Result = HandleRequestResult.Fail(failure);
-
-        public void Fail(string failureMessage) => Result = HandleRequestResult.Fail(failureMessage);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/RemoteAuthenticationEvents.cs b/src/Microsoft.AspNetCore.Authentication/Events/RemoteAuthenticationEvents.cs
deleted file mode 100644
index be4c6ab49..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/RemoteAuthenticationEvents.cs
+++ /dev/null
@@ -1,31 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class RemoteAuthenticationEvents
-    {
-        public Func<AccessDeniedContext, Task> OnAccessDenied { get; set; } = context => Task.CompletedTask;
-        public Func<RemoteFailureContext, Task> OnRemoteFailure { get; set; } = context => Task.CompletedTask;
-
-        public Func<TicketReceivedContext, Task> OnTicketReceived { get; set; } = context => Task.CompletedTask;
-
-        /// <summary>
-        /// Invoked when an access denied error was returned by the remote server.
-        /// </summary>
-        public virtual Task AccessDenied(AccessDeniedContext context) => OnAccessDenied(context);
-
-        /// <summary>
-        /// Invoked when there is a remote failure.
-        /// </summary>
-        public virtual Task RemoteFailure(RemoteFailureContext context) => OnRemoteFailure(context);
-
-        /// <summary>
-        /// Invoked after the remote ticket has been received.
-        /// </summary>
-        public virtual Task TicketReceived(TicketReceivedContext context) => OnTicketReceived(context);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/RemoteFailureContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/RemoteFailureContext.cs
deleted file mode 100644
index 6b3598f40..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/RemoteFailureContext.cs
+++ /dev/null
@@ -1,34 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Provides failure context information to handler providers.
-    /// </summary>
-    public class RemoteFailureContext : HandleRequestContext<RemoteAuthenticationOptions>
-    {
-        public RemoteFailureContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            RemoteAuthenticationOptions options,
-            Exception failure)
-            : base(context, scheme, options)
-        {
-            Failure = failure;
-        }
-
-        /// <summary>
-        /// User friendly error message for the error.
-        /// </summary>
-        public Exception Failure { get; set; }
-
-        /// <summary>
-        /// Additional state values for the authentication session.
-        /// </summary>
-        public AuthenticationProperties Properties { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/ResultContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/ResultContext.cs
deleted file mode 100644
index 12b21f4bf..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/ResultContext.cs
+++ /dev/null
@@ -1,65 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Base context for events that produce AuthenticateResults.
-    /// </summary>
-    public abstract class ResultContext<TOptions> : BaseContext<TOptions> where TOptions : AuthenticationSchemeOptions
-    {
-        /// <summary>
-        /// Constructor.
-        /// </summary>
-        /// <param name="context">The context.</param>
-        /// <param name="scheme">The authentication scheme.</param>
-        /// <param name="options">The authentication options associated with the scheme.</param>
-        protected ResultContext(HttpContext context, AuthenticationScheme scheme, TOptions options)
-            : base(context, scheme, options) { }
-
-        /// <summary>
-        /// Gets or sets the <see cref="ClaimsPrincipal"/> containing the user claims.
-        /// </summary>
-        public ClaimsPrincipal Principal { get; set; }
-
-        private AuthenticationProperties _properties;
-        /// <summary>
-        /// Gets or sets the <see cref="AuthenticationProperties"/>.
-        /// </summary>
-        public AuthenticationProperties Properties {
-            get => _properties ?? (_properties = new AuthenticationProperties());
-            set => _properties = value;
-        }
-
-        /// <summary>
-        /// Gets the <see cref="AuthenticateResult"/> result.
-        /// </summary>
-        public AuthenticateResult Result { get; private set; }
-
-        /// <summary>
-        /// Calls success creating a ticket with the <see cref="Principal"/> and <see cref="Properties"/>.
-        /// </summary>
-        public void Success() => Result = HandleRequestResult.Success(new AuthenticationTicket(Principal, Properties, Scheme.Name));
-
-        /// <summary>
-        /// Indicates that there was no information returned for this authentication scheme.
-        /// </summary>
-        public void NoResult() => Result = AuthenticateResult.NoResult();
-
-        /// <summary>
-        /// Indicates that there was a failure during authentication.
-        /// </summary>
-        /// <param name="failure"></param>
-        public void Fail(Exception failure) => Result = AuthenticateResult.Fail(failure);
-
-        /// <summary>
-        /// Indicates that there was a failure during authentication.
-        /// </summary>
-        /// <param name="failureMessage"></param>
-        public void Fail(string failureMessage) => Result = AuthenticateResult.Fail(failureMessage);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Events/TicketReceivedContext.cs b/src/Microsoft.AspNetCore.Authentication/Events/TicketReceivedContext.cs
deleted file mode 100644
index 51b77a37f..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Events/TicketReceivedContext.cs
+++ /dev/null
@@ -1,24 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Provides context information to handler providers.
-    /// </summary>
-    public class TicketReceivedContext : RemoteAuthenticationContext<RemoteAuthenticationOptions>
-    {
-        public TicketReceivedContext(
-            HttpContext context,
-            AuthenticationScheme scheme,
-            RemoteAuthenticationOptions options,
-            AuthenticationTicket ticket)
-            : base(context, scheme, options, ticket?.Properties)
-            => Principal = ticket?.Principal;
-
-        public string ReturnUri { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/HandleRequestResult.cs b/src/Microsoft.AspNetCore.Authentication/HandleRequestResult.cs
deleted file mode 100644
index da9b6ea01..000000000
--- a/src/Microsoft.AspNetCore.Authentication/HandleRequestResult.cs
+++ /dev/null
@@ -1,96 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Contains the result of an Authenticate call
-    /// </summary>
-    public class HandleRequestResult : AuthenticateResult
-    {
-        /// <summary>
-        /// Indicates that stage of authentication was directly handled by
-        /// user intervention and no further processing should be attempted.
-        /// </summary>
-        public bool Handled { get; private set; }
-
-        /// <summary>
-        /// Indicates that the default authentication logic should be
-        /// skipped and that the rest of the pipeline should be invoked.
-        /// </summary>
-        public bool Skipped { get; private set; }
-
-        /// <summary>
-        /// Indicates that authentication was successful.
-        /// </summary>
-        /// <param name="ticket">The ticket representing the authentication result.</param>
-        /// <returns>The result.</returns>
-        public static new HandleRequestResult Success(AuthenticationTicket ticket)
-        {
-            if (ticket == null)
-            {
-                throw new ArgumentNullException(nameof(ticket));
-            }
-            return new HandleRequestResult() { Ticket = ticket, Properties = ticket.Properties };
-        }
-
-        /// <summary>
-        /// Indicates that there was a failure during authentication.
-        /// </summary>
-        /// <param name="failure">The failure exception.</param>
-        /// <returns>The result.</returns>
-        public static new HandleRequestResult Fail(Exception failure)
-        {
-            return new HandleRequestResult() { Failure = failure };
-        }
-
-        /// <summary>
-        /// Indicates that there was a failure during authentication.
-        /// </summary>
-        /// <param name="failure">The failure exception.</param>
-        /// <param name="properties">Additional state values for the authentication session.</param>
-        /// <returns>The result.</returns>
-        public static new HandleRequestResult Fail(Exception failure, AuthenticationProperties properties)
-        {
-            return new HandleRequestResult() { Failure = failure, Properties = properties };
-        }
-
-        /// <summary>
-        /// Indicates that there was a failure during authentication.
-        /// </summary>
-        /// <param name="failureMessage">The failure message.</param>
-        /// <returns>The result.</returns>
-        public static new HandleRequestResult Fail(string failureMessage)
-            => Fail(new Exception(failureMessage));
-
-        /// <summary>
-        /// Indicates that there was a failure during authentication.
-        /// </summary>
-        /// <param name="failureMessage">The failure message.</param>
-        /// <param name="properties">Additional state values for the authentication session.</param>
-        /// <returns>The result.</returns>
-        public static new HandleRequestResult Fail(string failureMessage, AuthenticationProperties properties)
-            => Fail(new Exception(failureMessage), properties);
-
-        /// <summary>
-        /// Discontinue all processing for this request and return to the client.
-        /// The caller is responsible for generating the full response.
-        /// </summary>
-        /// <returns>The result.</returns>
-        public static HandleRequestResult Handle()
-        {
-            return new HandleRequestResult() { Handled = true };
-        }
-
-        /// <summary>
-        /// Discontinue processing the request in the current handler.
-        /// </summary>
-        /// <returns>The result.</returns>
-        public static HandleRequestResult SkipHandler()
-        {
-            return new HandleRequestResult() { Skipped = true };
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/ISystemClock.cs b/src/Microsoft.AspNetCore.Authentication/ISystemClock.cs
deleted file mode 100644
index 558266986..000000000
--- a/src/Microsoft.AspNetCore.Authentication/ISystemClock.cs
+++ /dev/null
@@ -1,19 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-
-using System;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Abstracts the system clock to facilitate testing.
-    /// </summary>
-    public interface ISystemClock
-    {
-        /// <summary>
-        /// Retrieves the current system time in UTC.
-        /// </summary>
-        DateTimeOffset UtcNow { get; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Internal/RequestPathBaseCookieBuilder.cs b/src/Microsoft.AspNetCore.Authentication/Internal/RequestPathBaseCookieBuilder.cs
deleted file mode 100644
index f42617cb2..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Internal/RequestPathBaseCookieBuilder.cs
+++ /dev/null
@@ -1,38 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication.Internal
-{
-    /// <summary>
-    /// A cookie builder that sets <see cref="CookieOptions.Path"/> to the request path base.
-    /// </summary>
-    public class RequestPathBaseCookieBuilder : CookieBuilder
-    {
-        /// <summary>
-        /// Gets an optional value that is appended to the request path base.
-        /// </summary>
-        protected virtual string AdditionalPath { get; }
-
-        public override CookieOptions Build(HttpContext context, DateTimeOffset expiresFrom)
-        {
-            // check if the user has overridden the default value of path. If so, use that instead of our default value.
-            var path = Path;
-            if (path == null)
-            {
-                var originalPathBase = context.Features.Get<IAuthenticationFeature>()?.OriginalPathBase ?? context.Request.PathBase;
-                path = originalPathBase + AdditionalPath;
-            }
-
-            var options = base.Build(context, expiresFrom);
-
-            options.Path = !string.IsNullOrEmpty(path)
-                ? path
-                : "/";
-
-            return options;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/LoggingExtensions.cs b/src/Microsoft.AspNetCore.Authentication/LoggingExtensions.cs
deleted file mode 100644
index 042bfabca..000000000
--- a/src/Microsoft.AspNetCore.Authentication/LoggingExtensions.cs
+++ /dev/null
@@ -1,155 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.Extensions.Logging
-{
-    internal static class LoggingExtensions
-    {
-        private static readonly Action<ILogger, string, Exception> _authSchemeAuthenticated;
-        private static readonly Action<ILogger, string, Exception> _authSchemeNotAuthenticated;
-        private static readonly Action<ILogger, string, string, Exception> _authSchemeNotAuthenticatedWithFailure;
-        private static readonly Action<ILogger, string, Exception> _authSchemeChallenged;
-        private static readonly Action<ILogger, string, Exception> _authSchemeForbidden;
-        private static readonly Action<ILogger, string, Exception> _remoteAuthenticationError;
-        private static readonly Action<ILogger, Exception> _signInHandled;
-        private static readonly Action<ILogger, Exception> _signInSkipped;
-        private static readonly Action<ILogger, string, Exception> _correlationPropertyNotFound;
-        private static readonly Action<ILogger, string, Exception> _correlationCookieNotFound;
-        private static readonly Action<ILogger, string, string, Exception> _unexpectedCorrelationCookieValue;
-        private static readonly Action<ILogger, Exception> _accessDeniedError;
-        private static readonly Action<ILogger, Exception> _accessDeniedContextHandled;
-        private static readonly Action<ILogger, Exception> _accessDeniedContextSkipped;
-
-        static LoggingExtensions()
-        {
-            _remoteAuthenticationError = LoggerMessage.Define<string>(
-                eventId: 4,
-                logLevel: LogLevel.Information,
-                formatString: "Error from RemoteAuthentication: {ErrorMessage}.");
-            _signInHandled = LoggerMessage.Define(
-                eventId: 5,
-                logLevel: LogLevel.Debug,
-                formatString: "The SigningIn event returned Handled.");
-            _signInSkipped = LoggerMessage.Define(
-                eventId: 6,
-                logLevel: LogLevel.Debug,
-                formatString: "The SigningIn event returned Skipped.");
-            _authSchemeNotAuthenticatedWithFailure = LoggerMessage.Define<string, string>(
-                eventId: 7,
-                logLevel: LogLevel.Information,
-                formatString: "{AuthenticationScheme} was not authenticated. Failure message: {FailureMessage}");
-            _authSchemeAuthenticated = LoggerMessage.Define<string>(
-                eventId: 8,
-                logLevel: LogLevel.Debug,
-                formatString: "AuthenticationScheme: {AuthenticationScheme} was successfully authenticated.");
-            _authSchemeNotAuthenticated = LoggerMessage.Define<string>(
-                eventId: 9,
-                logLevel: LogLevel.Debug,
-                formatString: "AuthenticationScheme: {AuthenticationScheme} was not authenticated.");
-            _authSchemeChallenged = LoggerMessage.Define<string>(
-                eventId: 12,
-                logLevel: LogLevel.Information,
-                formatString: "AuthenticationScheme: {AuthenticationScheme} was challenged.");
-            _authSchemeForbidden = LoggerMessage.Define<string>(
-                eventId: 13,
-                logLevel: LogLevel.Information,
-                formatString: "AuthenticationScheme: {AuthenticationScheme} was forbidden.");
-            _correlationPropertyNotFound = LoggerMessage.Define<string>(
-                eventId: 14,
-                logLevel: LogLevel.Warning,
-                formatString: "{CorrelationProperty} state property not found.");
-            _correlationCookieNotFound = LoggerMessage.Define<string>(
-                eventId: 15,
-                logLevel: LogLevel.Warning,
-                formatString: "'{CorrelationCookieName}' cookie not found.");
-            _unexpectedCorrelationCookieValue = LoggerMessage.Define<string, string>(
-               eventId: 16,
-               logLevel: LogLevel.Warning,
-               formatString: "The correlation cookie value '{CorrelationCookieName}' did not match the expected value '{CorrelationCookieValue}'.");
-            _accessDeniedError = LoggerMessage.Define(
-                eventId: 17,
-                logLevel: LogLevel.Information,
-                formatString: "Access was denied by the resource owner or by the remote server.");
-            _accessDeniedContextHandled = LoggerMessage.Define(
-                eventId: 18,
-                logLevel: LogLevel.Debug,
-                formatString: "The AccessDenied event returned Handled.");
-            _accessDeniedContextSkipped = LoggerMessage.Define(
-                eventId: 19,
-                logLevel: LogLevel.Debug,
-                formatString: "The AccessDenied event returned Skipped.");
-        }
-
-        public static void AuthenticationSchemeAuthenticated(this ILogger logger, string authenticationScheme)
-        {
-            _authSchemeAuthenticated(logger, authenticationScheme, null);
-        }
-
-        public static void AuthenticationSchemeNotAuthenticated(this ILogger logger, string authenticationScheme)
-        {
-            _authSchemeNotAuthenticated(logger, authenticationScheme, null);
-        }
-
-        public static void AuthenticationSchemeNotAuthenticatedWithFailure(this ILogger logger, string authenticationScheme, string failureMessage)
-        {
-            _authSchemeNotAuthenticatedWithFailure(logger, authenticationScheme, failureMessage, null);
-        }
-
-        public static void AuthenticationSchemeChallenged(this ILogger logger, string authenticationScheme)
-        {
-            _authSchemeChallenged(logger, authenticationScheme, null);
-        }
-
-        public static void AuthenticationSchemeForbidden(this ILogger logger, string authenticationScheme)
-        {
-            _authSchemeForbidden(logger, authenticationScheme, null);
-        }
-
-        public static void RemoteAuthenticationError(this ILogger logger, string errorMessage)
-        {
-            _remoteAuthenticationError(logger, errorMessage, null);
-        }
-
-        public static void SigninHandled(this ILogger logger)
-        {
-            _signInHandled(logger, null);
-        }
-
-        public static void SigninSkipped(this ILogger logger)
-        {
-            _signInSkipped(logger, null);
-        }
-
-        public static void CorrelationPropertyNotFound(this ILogger logger, string correlationPrefix)
-        {
-            _correlationPropertyNotFound(logger, correlationPrefix, null);
-        }
-
-        public static void CorrelationCookieNotFound(this ILogger logger, string cookieName)
-        {
-            _correlationCookieNotFound(logger, cookieName, null);
-        }
-
-        public static void UnexpectedCorrelationCookieValue(this ILogger logger, string cookieName, string cookieValue)
-        {
-            _unexpectedCorrelationCookieValue(logger, cookieName, cookieValue, null);
-        }
-
-        public static void AccessDeniedError(this ILogger logger)
-        {
-            _accessDeniedError(logger, null);
-        }
-
-        public static void AccessDeniedContextHandled(this ILogger logger)
-        {
-            _accessDeniedContextHandled(logger, null);
-        }
-
-        public static void AccessDeniedContextSkipped(this ILogger logger)
-        {
-            _accessDeniedContextSkipped(logger, null);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Microsoft.AspNetCore.Authentication.csproj b/src/Microsoft.AspNetCore.Authentication/Microsoft.AspNetCore.Authentication.csproj
deleted file mode 100644
index 9ae0a7bcc..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Microsoft.AspNetCore.Authentication.csproj
+++ /dev/null
@@ -1,22 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core common types used by the various authentication middleware components.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authentication;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Authentication.Core" Version="$(MicrosoftAspNetCoreAuthenticationCorePackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="$(MicrosoftAspNetCoreDataProtectionPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Http" Version="$(MicrosoftAspNetCoreHttpPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Http.Extensions" Version="$(MicrosoftAspNetCoreHttpExtensionsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="$(MicrosoftExtensionsLoggingAbstractionsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Options" Version="$(MicrosoftExtensionsOptionsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.SecurityHelper.Sources" PrivateAssets="All" Version="$(MicrosoftExtensionsSecurityHelperSourcesPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.WebEncoders" Version="$(MicrosoftExtensionsWebEncodersPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authentication/PolicySchemeHandler.cs b/src/Microsoft.AspNetCore.Authentication/PolicySchemeHandler.cs
deleted file mode 100644
index 4dbbb7de2..000000000
--- a/src/Microsoft.AspNetCore.Authentication/PolicySchemeHandler.cs
+++ /dev/null
@@ -1,36 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// PolicySchemes are used to redirect authentication methods to another scheme.
-    /// </summary>
-    public class PolicySchemeHandler : SignInAuthenticationHandler<PolicySchemeOptions>
-    {
-        public PolicySchemeHandler(IOptionsMonitor<PolicySchemeOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) : base(options, logger, encoder, clock)
-        { }
-
-        protected override Task HandleChallengeAsync(AuthenticationProperties properties)
-            => throw new NotImplementedException();
-
-        protected override Task HandleForbiddenAsync(AuthenticationProperties properties)
-            => throw new NotImplementedException();
-
-        protected override Task HandleSignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-            => throw new NotImplementedException();
-
-        protected override Task HandleSignOutAsync(AuthenticationProperties properties)
-            => throw new NotImplementedException();
-
-        protected override Task<AuthenticateResult> HandleAuthenticateAsync()
-            => throw new NotImplementedException();
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/PolicySchemeOptions.cs b/src/Microsoft.AspNetCore.Authentication/PolicySchemeOptions.cs
deleted file mode 100644
index 1921c77ec..000000000
--- a/src/Microsoft.AspNetCore.Authentication/PolicySchemeOptions.cs
+++ /dev/null
@@ -1,11 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Contains the options used by the <see cref="PolicySchemeHandler"/>.
-    /// </summary>
-    public class PolicySchemeOptions : AuthenticationSchemeOptions
-    { }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authentication/Properties/Resources.Designer.cs
deleted file mode 100644
index b1941a7dc..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,100 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authentication
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authentication.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// The default data protection provider may only be used when the IApplicationBuilder.Properties contains an appropriate 'host.AppName' key.
-        /// </summary>
-        internal static string Exception_DefaultDpapiRequiresAppNameKey
-        {
-            get => GetString("Exception_DefaultDpapiRequiresAppNameKey");
-        }
-
-        /// <summary>
-        /// The default data protection provider may only be used when the IApplicationBuilder.Properties contains an appropriate 'host.AppName' key.
-        /// </summary>
-        internal static string FormatException_DefaultDpapiRequiresAppNameKey()
-            => GetString("Exception_DefaultDpapiRequiresAppNameKey");
-
-        /// <summary>
-        /// The state passed to UnhookAuthentication may only be the return value from HookAuthentication.
-        /// </summary>
-        internal static string Exception_UnhookAuthenticationStateType
-        {
-            get => GetString("Exception_UnhookAuthenticationStateType");
-        }
-
-        /// <summary>
-        /// The state passed to UnhookAuthentication may only be the return value from HookAuthentication.
-        /// </summary>
-        internal static string FormatException_UnhookAuthenticationStateType()
-            => GetString("Exception_UnhookAuthenticationStateType");
-
-        /// <summary>
-        /// The AuthenticationTokenProvider's required synchronous events have not been registered.
-        /// </summary>
-        internal static string Exception_AuthenticationTokenDoesNotProvideSyncMethods
-        {
-            get => GetString("Exception_AuthenticationTokenDoesNotProvideSyncMethods");
-        }
-
-        /// <summary>
-        /// The AuthenticationTokenProvider's required synchronous events have not been registered.
-        /// </summary>
-        internal static string FormatException_AuthenticationTokenDoesNotProvideSyncMethods()
-            => GetString("Exception_AuthenticationTokenDoesNotProvideSyncMethods");
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string Exception_OptionMustBeProvided
-        {
-            get => GetString("Exception_OptionMustBeProvided");
-        }
-
-        /// <summary>
-        /// The '{0}' option must be provided.
-        /// </summary>
-        internal static string FormatException_OptionMustBeProvided(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_OptionMustBeProvided"), p0);
-
-        /// <summary>
-        /// The SignInScheme for a remote authentication handler cannot be set to itself.  If it was not explicitly set, the AuthenticationOptions.DefaultSignInScheme or DefaultScheme is used.
-        /// </summary>
-        internal static string Exception_RemoteSignInSchemeCannotBeSelf
-        {
-            get => GetString("Exception_RemoteSignInSchemeCannotBeSelf");
-        }
-
-        /// <summary>
-        /// The SignInScheme for a remote authentication handler cannot be set to itself.  If it was not explicitly set, the AuthenticationOptions.DefaultSignInScheme or DefaultScheme is used.
-        /// </summary>
-        internal static string FormatException_RemoteSignInSchemeCannotBeSelf()
-            => GetString("Exception_RemoteSignInSchemeCannotBeSelf");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/RemoteAuthenticationHandler.cs b/src/Microsoft.AspNetCore.Authentication/RemoteAuthenticationHandler.cs
deleted file mode 100644
index c72583b5c..000000000
--- a/src/Microsoft.AspNetCore.Authentication/RemoteAuthenticationHandler.cs
+++ /dev/null
@@ -1,289 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Cryptography;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.WebUtilities;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public abstract class RemoteAuthenticationHandler<TOptions> : AuthenticationHandler<TOptions>, IAuthenticationRequestHandler
-        where TOptions : RemoteAuthenticationOptions, new()
-    {
-        private const string CorrelationProperty = ".xsrf";
-        private const string CorrelationMarker = "N";
-        private const string AuthSchemeKey = ".AuthScheme";
-
-        private static readonly RandomNumberGenerator CryptoRandom = RandomNumberGenerator.Create();
-
-        protected string SignInScheme => Options.SignInScheme;
-
-        /// <summary>
-        /// The handler calls methods on the events which give the application control at certain points where processing is occurring.
-        /// If it is not provided a default instance is supplied which does nothing when the methods are called.
-        /// </summary>
-        protected new RemoteAuthenticationEvents Events
-        {
-            get { return (RemoteAuthenticationEvents)base.Events; }
-            set { base.Events = value; }
-        }
-
-        protected RemoteAuthenticationHandler(IOptionsMonitor<TOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
-            : base(options, logger, encoder, clock) { }
-
-        protected override Task<object> CreateEventsAsync()
-            => Task.FromResult<object>(new RemoteAuthenticationEvents());
-
-        public virtual Task<bool> ShouldHandleRequestAsync()
-            => Task.FromResult(Options.CallbackPath == Request.Path);
-
-        public virtual async Task<bool> HandleRequestAsync()
-        {
-            if (!await ShouldHandleRequestAsync())
-            {
-                return false;
-            }
-
-            AuthenticationTicket ticket = null;
-            Exception exception = null;
-            AuthenticationProperties properties = null;
-            try
-            {
-                var authResult = await HandleRemoteAuthenticateAsync();
-                if (authResult == null)
-                {
-                    exception = new InvalidOperationException("Invalid return state, unable to redirect.");
-                }
-                else if (authResult.Handled)
-                {
-                    return true;
-                }
-                else if (authResult.Skipped || authResult.None)
-                {
-                    return false;
-                }
-                else if (!authResult.Succeeded)
-                {
-                    exception = authResult.Failure ?? new InvalidOperationException("Invalid return state, unable to redirect.");
-                    properties = authResult.Properties;
-                }
-
-                ticket = authResult?.Ticket;
-            }
-            catch (Exception ex)
-            {
-                exception = ex;
-            }
-
-            if (exception != null)
-            {
-                Logger.RemoteAuthenticationError(exception.Message);
-                var errorContext = new RemoteFailureContext(Context, Scheme, Options, exception)
-                {
-                    Properties = properties
-                };
-                await Events.RemoteFailure(errorContext);
-
-                if (errorContext.Result != null)
-                {
-                    if (errorContext.Result.Handled)
-                    {
-                        return true;
-                    }
-                    else if (errorContext.Result.Skipped)
-                    {
-                        return false;
-                    }
-                    else if (errorContext.Result.Failure != null)
-                    {
-                        throw new Exception("An error was returned from the RemoteFailure event.", errorContext.Result.Failure);
-                    }
-                }
-
-                if (errorContext.Failure != null)
-                {
-                    throw new Exception("An error was encountered while handling the remote login.", errorContext.Failure);
-                }
-            }
-
-            // We have a ticket if we get here
-            var ticketContext = new TicketReceivedContext(Context, Scheme, Options, ticket)
-            {
-                ReturnUri = ticket.Properties.RedirectUri
-            };
-
-            ticket.Properties.RedirectUri = null;
-
-            // Mark which provider produced this identity so we can cross-check later in HandleAuthenticateAsync
-            ticketContext.Properties.Items[AuthSchemeKey] = Scheme.Name;
-
-            await Events.TicketReceived(ticketContext);
-
-            if (ticketContext.Result != null)
-            {
-                if (ticketContext.Result.Handled)
-                {
-                    Logger.SigninHandled();
-                    return true;
-                }
-                else if (ticketContext.Result.Skipped)
-                {
-                    Logger.SigninSkipped();
-                    return false;
-                }
-            }
-
-            await Context.SignInAsync(SignInScheme, ticketContext.Principal, ticketContext.Properties);
-
-            // Default redirect path is the base path
-            if (string.IsNullOrEmpty(ticketContext.ReturnUri))
-            {
-                ticketContext.ReturnUri = "/";
-            }
-
-            Response.Redirect(ticketContext.ReturnUri);
-            return true;
-        }
-
-        /// <summary>
-        /// Authenticate the user identity with the identity provider.
-        ///
-        /// The method process the request on the endpoint defined by CallbackPath.
-        /// </summary>
-        protected abstract Task<HandleRequestResult> HandleRemoteAuthenticateAsync();
-
-        protected override async Task<AuthenticateResult> HandleAuthenticateAsync()
-        {
-            var result = await Context.AuthenticateAsync(SignInScheme);
-            if (result != null)
-            {
-                if (result.Failure != null)
-                {
-                    return result;
-                }
-
-                // The SignInScheme may be shared with multiple providers, make sure this provider issued the identity.
-                string authenticatedScheme;
-                var ticket = result.Ticket;
-                if (ticket != null && ticket.Principal != null && ticket.Properties != null
-                    && ticket.Properties.Items.TryGetValue(AuthSchemeKey, out authenticatedScheme)
-                    && string.Equals(Scheme.Name, authenticatedScheme, StringComparison.Ordinal))
-                {
-                    return AuthenticateResult.Success(new AuthenticationTicket(ticket.Principal,
-                        ticket.Properties, Scheme.Name));
-                }
-
-                return AuthenticateResult.Fail("Not authenticated");
-            }
-
-            return AuthenticateResult.Fail("Remote authentication does not directly support AuthenticateAsync");
-        }
-
-        protected override Task HandleForbiddenAsync(AuthenticationProperties properties)
-            => Context.ForbidAsync(SignInScheme);
-
-        protected virtual void GenerateCorrelationId(AuthenticationProperties properties)
-        {
-            if (properties == null)
-            {
-                throw new ArgumentNullException(nameof(properties));
-            }
-
-            var bytes = new byte[32];
-            CryptoRandom.GetBytes(bytes);
-            var correlationId = Base64UrlTextEncoder.Encode(bytes);
-
-            var cookieOptions = Options.CorrelationCookie.Build(Context, Clock.UtcNow);
-
-            properties.Items[CorrelationProperty] = correlationId;
-
-            var cookieName = Options.CorrelationCookie.Name + Scheme.Name + "." + correlationId;
-
-            Response.Cookies.Append(cookieName, CorrelationMarker, cookieOptions);
-        }
-
-        protected virtual bool ValidateCorrelationId(AuthenticationProperties properties)
-        {
-            if (properties == null)
-            {
-                throw new ArgumentNullException(nameof(properties));
-            }
-
-            if (!properties.Items.TryGetValue(CorrelationProperty, out string correlationId))
-            {
-                Logger.CorrelationPropertyNotFound(Options.CorrelationCookie.Name);
-                return false;
-            }
-
-            properties.Items.Remove(CorrelationProperty);
-
-            var cookieName = Options.CorrelationCookie.Name + Scheme.Name + "." + correlationId;
-
-            var correlationCookie = Request.Cookies[cookieName];
-            if (string.IsNullOrEmpty(correlationCookie))
-            {
-                Logger.CorrelationCookieNotFound(cookieName);
-                return false;
-            }
-
-            var cookieOptions = Options.CorrelationCookie.Build(Context, Clock.UtcNow);
-
-            Response.Cookies.Delete(cookieName, cookieOptions);
-
-            if (!string.Equals(correlationCookie, CorrelationMarker, StringComparison.Ordinal))
-            {
-                Logger.UnexpectedCorrelationCookieValue(cookieName, correlationCookie);
-                return false;
-            }
-
-            return true;
-        }
-
-        protected virtual async Task<HandleRequestResult> HandleAccessDeniedErrorAsync(AuthenticationProperties properties)
-        {
-            Logger.AccessDeniedError();
-            var context = new AccessDeniedContext(Context, Scheme, Options)
-            {
-                AccessDeniedPath = Options.AccessDeniedPath,
-                Properties = properties,
-                ReturnUrl = properties?.RedirectUri,
-                ReturnUrlParameter = Options.ReturnUrlParameter
-            };
-            await Events.AccessDenied(context);
-
-            if (context.Result != null)
-            {
-                if (context.Result.Handled)
-                {
-                    Logger.AccessDeniedContextHandled();
-                }
-                else if (context.Result.Skipped)
-                {
-                    Logger.AccessDeniedContextSkipped();
-                }
-
-                return context.Result;
-            }
-
-            // If an access denied endpoint was specified, redirect the user agent.
-            // Otherwise, invoke the RemoteFailure event for further processing.
-            if (context.AccessDeniedPath.HasValue)
-            {
-                string uri = context.AccessDeniedPath;
-                if (!string.IsNullOrEmpty(context.ReturnUrlParameter) && !string.IsNullOrEmpty(context.ReturnUrl))
-                {
-                    uri = QueryHelpers.AddQueryString(uri, context.ReturnUrlParameter, context.ReturnUrl);
-                }
-                Response.Redirect(uri);
-
-                return HandleRequestResult.Handle();
-            }
-
-            return HandleRequestResult.Fail("Access was denied by the resource owner or by the remote server.", properties);
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/RemoteAuthenticationOptions.cs b/src/Microsoft.AspNetCore.Authentication/RemoteAuthenticationOptions.cs
deleted file mode 100644
index 188b7a991..000000000
--- a/src/Microsoft.AspNetCore.Authentication/RemoteAuthenticationOptions.cs
+++ /dev/null
@@ -1,169 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Net.Http;
-using Microsoft.AspNetCore.Authentication.Internal;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Contains the options used by the <see cref="RemoteAuthenticationHandler{T}"/>.
-    /// </summary>
-    public class RemoteAuthenticationOptions : AuthenticationSchemeOptions
-    {
-        private const string CorrelationPrefix = ".AspNetCore.Correlation.";
-
-        private CookieBuilder _correlationCookieBuilder;
-
-        /// <summary>
-        /// Initializes a new <see cref="RemoteAuthenticationOptions"/>.
-        /// </summary>
-        public RemoteAuthenticationOptions()
-        {
-            _correlationCookieBuilder = new CorrelationCookieBuilder(this)
-            {
-                Name = CorrelationPrefix,
-                HttpOnly = true,
-                SameSite = SameSiteMode.None,
-                SecurePolicy = CookieSecurePolicy.SameAsRequest,
-                IsEssential = true,
-            };
-        }
-
-        /// <summary>
-        /// Checks that the options are valid for a specific scheme
-        /// </summary>
-        /// <param name="scheme">The scheme being validated.</param>
-        public override void Validate(string scheme)
-        {
-            base.Validate(scheme);
-            if (string.Equals(scheme, SignInScheme, StringComparison.Ordinal))
-            {
-                throw new InvalidOperationException(Resources.Exception_RemoteSignInSchemeCannotBeSelf);
-            }
-        }
-
-        /// <summary>
-        /// Check that the options are valid.  Should throw an exception if things are not ok.
-        /// </summary>
-        public override void Validate()
-        {
-            base.Validate();
-            if (CallbackPath == null || !CallbackPath.HasValue)
-            {
-                throw new ArgumentException(Resources.FormatException_OptionMustBeProvided(nameof(CallbackPath)), nameof(CallbackPath));
-            }
-        }
-
-        /// <summary>
-        /// Gets or sets timeout value in milliseconds for back channel communications with the remote identity provider.
-        /// </summary>
-        /// <value>
-        /// The back channel timeout.
-        /// </value>
-        public TimeSpan BackchannelTimeout { get; set; } = TimeSpan.FromSeconds(60);
-
-        /// <summary>
-        /// The HttpMessageHandler used to communicate with remote identity provider.
-        /// This cannot be set at the same time as BackchannelCertificateValidator unless the value 
-        /// can be downcast to a WebRequestHandler.
-        /// </summary>
-        public HttpMessageHandler BackchannelHttpHandler { get; set; }
-
-        /// <summary>
-        /// Used to communicate with the remote identity provider.
-        /// </summary>
-        public HttpClient Backchannel { get; set; }
-
-        /// <summary>
-        /// Gets or sets the type used to secure data.
-        /// </summary>
-        public IDataProtectionProvider DataProtectionProvider { get; set; }
-
-        /// <summary>
-        /// The request path within the application's base path where the user-agent will be returned.
-        /// The middleware will process this request when it arrives.
-        /// </summary>
-        public PathString CallbackPath { get; set; }
-
-        /// <summary>
-        /// Gets or sets the optional path the user agent is redirected to if the user
-        /// doesn't approve the authorization demand requested by the remote server.
-        /// This property is not set by default. In this case, an exception is thrown
-        /// if an access_denied response is returned by the remote authorization server.
-        /// </summary>
-        public PathString AccessDeniedPath { get; set; }
-
-        /// <summary>
-        /// Gets or sets the name of the parameter used to convey the original location
-        /// of the user before the remote challenge was triggered up to the access denied page.
-        /// This property is only used when the <see cref="AccessDeniedPath"/> is explicitly specified.
-        /// </summary>
-        // Note: this deliberately matches the default parameter name used by the cookie handler.
-        public string ReturnUrlParameter { get; set; } = "ReturnUrl";
-
-        /// <summary>
-        /// Gets or sets the authentication scheme corresponding to the middleware
-        /// responsible of persisting user's identity after a successful authentication.
-        /// This value typically corresponds to a cookie middleware registered in the Startup class.
-        /// When omitted, <see cref="AuthenticationOptions.DefaultSignInScheme"/> is used as a fallback value.
-        /// </summary>
-        public string SignInScheme { get; set; }
-
-        /// <summary>
-        /// Gets or sets the time limit for completing the authentication flow (15 minutes by default).
-        /// </summary>
-        public TimeSpan RemoteAuthenticationTimeout { get; set; } = TimeSpan.FromMinutes(15);
-
-        public new RemoteAuthenticationEvents Events
-        {
-            get => (RemoteAuthenticationEvents)base.Events;
-            set => base.Events = value;
-        }
-
-        /// <summary>
-        /// Defines whether access and refresh tokens should be stored in the
-        /// <see cref="Http.Authentication.AuthenticationProperties"/> after a successful authorization.
-        /// This property is set to <c>false</c> by default to reduce
-        /// the size of the final authentication cookie.
-        /// </summary>
-        public bool SaveTokens { get; set; }
-
-        /// <summary>
-        /// Determines the settings used to create the correlation cookie before the
-        /// cookie gets added to the response.
-        /// </summary>
-        public CookieBuilder CorrelationCookie
-        {
-            get => _correlationCookieBuilder;
-            set => _correlationCookieBuilder = value ?? throw new ArgumentNullException(nameof(value));
-        }
-
-        private class CorrelationCookieBuilder : RequestPathBaseCookieBuilder
-        {
-            private readonly RemoteAuthenticationOptions _options;
-
-            public CorrelationCookieBuilder(RemoteAuthenticationOptions remoteAuthenticationOptions)
-            {
-                _options = remoteAuthenticationOptions;
-            }
-
-            protected override string AdditionalPath => _options.CallbackPath;
-
-            public override CookieOptions Build(HttpContext context, DateTimeOffset expiresFrom)
-            {
-                var cookieOptions = base.Build(context, expiresFrom);
-
-                if (!Expiration.HasValue || !cookieOptions.Expires.HasValue)
-                {
-                    cookieOptions.Expires = expiresFrom.Add(_options.RemoteAuthenticationTimeout);
-                }
-
-                return cookieOptions;
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/Resources.resx b/src/Microsoft.AspNetCore.Authentication/Resources.resx
deleted file mode 100644
index 9e831dc74..000000000
--- a/src/Microsoft.AspNetCore.Authentication/Resources.resx
+++ /dev/null
@@ -1,135 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_DefaultDpapiRequiresAppNameKey" xml:space="preserve">
-    <value>The default data protection provider may only be used when the IApplicationBuilder.Properties contains an appropriate 'host.AppName' key.</value>
-  </data>
-  <data name="Exception_UnhookAuthenticationStateType" xml:space="preserve">
-    <value>The state passed to UnhookAuthentication may only be the return value from HookAuthentication.</value>
-  </data>
-  <data name="Exception_AuthenticationTokenDoesNotProvideSyncMethods" xml:space="preserve">
-    <value>The AuthenticationTokenProvider's required synchronous events have not been registered.</value>
-  </data>
-  <data name="Exception_OptionMustBeProvided" xml:space="preserve">
-    <value>The '{0}' option must be provided.</value>
-  </data>
-  <data name="Exception_RemoteSignInSchemeCannotBeSelf" xml:space="preserve">
-    <value>The SignInScheme for a remote authentication handler cannot be set to itself.  If it was not explicitly set, the AuthenticationOptions.DefaultSignInScheme or DefaultScheme is used.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/SignInAuthenticationHandler.cs b/src/Microsoft.AspNetCore.Authentication/SignInAuthenticationHandler.cs
deleted file mode 100644
index dbd612dc1..000000000
--- a/src/Microsoft.AspNetCore.Authentication/SignInAuthenticationHandler.cs
+++ /dev/null
@@ -1,39 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Adds support for SignInAsync
-    /// </summary>
-    public abstract class SignInAuthenticationHandler<TOptions> : SignOutAuthenticationHandler<TOptions>, IAuthenticationSignInHandler
-        where TOptions : AuthenticationSchemeOptions, new()
-    {
-        public SignInAuthenticationHandler(IOptionsMonitor<TOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) : base(options, logger, encoder, clock)
-        { }
-
-        public virtual Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-        {
-            var target = ResolveTarget(Options.ForwardSignIn);
-            return (target != null)
-                ? Context.SignInAsync(target, user, properties)
-                : HandleSignInAsync(user, properties ?? new AuthenticationProperties());
-        }
-
-        /// <summary>
-        /// Override this method to handle SignIn.
-        /// </summary>
-        /// <param name="user"></param>
-        /// <param name="properties"></param>
-        /// <returns>A Task.</returns>
-        protected abstract Task HandleSignInAsync(ClaimsPrincipal user, AuthenticationProperties properties);
-
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/SignOutAuthenticationHandler.cs b/src/Microsoft.AspNetCore.Authentication/SignOutAuthenticationHandler.cs
deleted file mode 100644
index 015cb39e0..000000000
--- a/src/Microsoft.AspNetCore.Authentication/SignOutAuthenticationHandler.cs
+++ /dev/null
@@ -1,36 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Adds support for SignOutAsync
-    /// </summary>
-    public abstract class SignOutAuthenticationHandler<TOptions> : AuthenticationHandler<TOptions>, IAuthenticationSignOutHandler
-        where TOptions : AuthenticationSchemeOptions, new()
-    {
-        public SignOutAuthenticationHandler(IOptionsMonitor<TOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) : base(options, logger, encoder, clock)
-        { }
-
-        public virtual Task SignOutAsync(AuthenticationProperties properties)
-        {
-            var target = ResolveTarget(Options.ForwardSignOut);
-            return (target != null)
-                ? Context.SignOutAsync(target, properties)
-                : HandleSignOutAsync(properties ?? new AuthenticationProperties());
-        }
-
-        /// <summary>
-        /// Override this method to handle SignOut.
-        /// </summary>
-        /// <param name="properties"></param>
-        /// <returns>A Task.</returns>
-        protected abstract Task HandleSignOutAsync(AuthenticationProperties properties);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/SystemClock.cs b/src/Microsoft.AspNetCore.Authentication/SystemClock.cs
deleted file mode 100644
index 2320982ce..000000000
--- a/src/Microsoft.AspNetCore.Authentication/SystemClock.cs
+++ /dev/null
@@ -1,27 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    /// <summary>
-    /// Provides access to the normal system clock with precision in seconds.
-    /// </summary>
-    public class SystemClock : ISystemClock
-    {
-        /// <summary>
-        /// Retrieves the current system time in UTC.
-        /// </summary>
-        public DateTimeOffset UtcNow
-        {
-            get
-            {
-                // the clock measures whole seconds only, to have integral expires_in results, and
-                // because milliseconds do not round-trip serialization formats
-                var utcNowPrecisionSeconds = new DateTime((DateTime.UtcNow.Ticks / TimeSpan.TicksPerSecond) * TimeSpan.TicksPerSecond, DateTimeKind.Utc);
-                return new DateTimeOffset(utcNowPrecisionSeconds);
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authentication/baseline.netcore.json b/src/Microsoft.AspNetCore.Authentication/baseline.netcore.json
deleted file mode 100644
index 08eeb5e7b..000000000
--- a/src/Microsoft.AspNetCore.Authentication/baseline.netcore.json
+++ /dev/null
@@ -1,3330 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authentication, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Services",
-          "Parameters": [],
-          "ReturnType": "Microsoft.Extensions.DependencyInjection.IServiceCollection",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddScheme<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>"
-              ]
-            }
-          ]
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddScheme<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>"
-              ]
-            }
-          ]
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddRemoteScheme<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<T0>"
-              ]
-            }
-          ]
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddPolicyScheme",
-          "Parameters": [
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.PolicySchemeOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IAuthenticationHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Scheme",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationScheme",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Options",
-          "Parameters": [],
-          "ReturnType": "T0",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Context",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.HttpContext",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Request",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.HttpRequest",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Response",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.HttpResponse",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OriginalPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OriginalPathBase",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Logger",
-          "Parameters": [],
-          "ReturnType": "Microsoft.Extensions.Logging.ILogger",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_UrlEncoder",
-          "Parameters": [],
-          "ReturnType": "System.Text.Encodings.Web.UrlEncoder",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Clock",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.ISystemClock",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OptionsMonitor",
-          "Parameters": [],
-          "ReturnType": "Microsoft.Extensions.Options.IOptionsMonitor<T0>",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "System.Object",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Object"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClaimsIssuer",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CurrentUri",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "InitializeAsync",
-          "Parameters": [
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "InitializeEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Object>",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "InitializeHandlerAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "BuildRedirectUri",
-          "Parameters": [
-            {
-              "Name": "targetPath",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ResolveTarget",
-          "Parameters": [
-            {
-              "Name": "scheme",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleAuthenticateOnceAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleAuthenticateOnceSafeAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Virtual": true,
-          "Abstract": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleForbiddenAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ForbidAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<T0>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "New": true,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.AuthenticationMiddleware",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Schemes",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.IAuthenticationSchemeProvider",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Schemes",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.IAuthenticationSchemeProvider"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Invoke",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "next",
-              "Type": "Microsoft.AspNetCore.Http.RequestDelegate"
-            },
-            {
-              "Name": "schemes",
-              "Type": "Microsoft.AspNetCore.Authentication.IAuthenticationSchemeProvider"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [
-            {
-              "Name": "scheme",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ClaimsIssuer",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ClaimsIssuer",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "System.Object",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Object"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_EventsType",
-          "Parameters": [],
-          "ReturnType": "System.Type",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_EventsType",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Type"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ForwardDefault",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ForwardDefault",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ForwardAuthenticate",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ForwardAuthenticate",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ForwardChallenge",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ForwardChallenge",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ForwardForbid",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ForwardForbid",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ForwardSignIn",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ForwardSignIn",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ForwardSignOut",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ForwardSignOut",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ForwardDefaultSelector",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Http.HttpContext, System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ForwardDefaultSelector",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Http.HttpContext, System.String>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.IDataSerializer<T0>",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Serialize",
-          "Parameters": [
-            {
-              "Name": "model",
-              "Type": "T0"
-            }
-          ],
-          "ReturnType": "System.Byte[]",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Deserialize",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "System.Byte[]"
-            }
-          ],
-          "ReturnType": "T0",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TModel",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": []
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<T0>",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Protect",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "T0"
-            }
-          ],
-          "ReturnType": "System.String",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Protect",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "T0"
-            },
-            {
-              "Name": "purpose",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Unprotect",
-          "Parameters": [
-            {
-              "Name": "protectedText",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "T0",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Unprotect",
-          "Parameters": [
-            {
-              "Name": "protectedText",
-              "Type": "System.String"
-            },
-            {
-              "Name": "purpose",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "T0",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TData",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": []
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.PropertiesDataFormat",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.SecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationProperties>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "protector",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtector"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.PropertiesSerializer",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.AuthenticationProperties>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Default",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.PropertiesSerializer",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Serialize",
-          "Parameters": [
-            {
-              "Name": "model",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Byte[]",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.AuthenticationProperties>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Deserialize",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "System.Byte[]"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationProperties",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.AuthenticationProperties>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Write",
-          "Parameters": [
-            {
-              "Name": "writer",
-              "Type": "System.IO.BinaryWriter"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Read",
-          "Parameters": [
-            {
-              "Name": "reader",
-              "Type": "System.IO.BinaryReader"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationProperties",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.SecureDataFormat<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.ISecureDataFormat<T0>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Protect",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "T0"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<T0>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Protect",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "T0"
-            },
-            {
-              "Name": "purpose",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<T0>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Unprotect",
-          "Parameters": [
-            {
-              "Name": "protectedText",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "T0",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<T0>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Unprotect",
-          "Parameters": [
-            {
-              "Name": "protectedText",
-              "Type": "System.String"
-            },
-            {
-              "Name": "purpose",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "T0",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.ISecureDataFormat<T0>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "serializer",
-              "Type": "Microsoft.AspNetCore.Authentication.IDataSerializer<T0>"
-            },
-            {
-              "Name": "protector",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtector"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TData",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": []
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.Base64UrlTextEncoder",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Encode",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "System.Byte[]"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Decode",
-          "Parameters": [
-            {
-              "Name": "text",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Byte[]",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.TicketDataFormat",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.SecureDataFormat<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "protector",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtector"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.TicketSerializer",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.AuthenticationTicket>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Default",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.TicketSerializer",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Serialize",
-          "Parameters": [
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationTicket"
-            }
-          ],
-          "ReturnType": "System.Byte[]",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Deserialize",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "System.Byte[]"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationTicket",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IDataSerializer<Microsoft.AspNetCore.Authentication.AuthenticationTicket>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Write",
-          "Parameters": [
-            {
-              "Name": "writer",
-              "Type": "System.IO.BinaryWriter"
-            },
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationTicket"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "WriteIdentity",
-          "Parameters": [
-            {
-              "Name": "writer",
-              "Type": "System.IO.BinaryWriter"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "WriteClaim",
-          "Parameters": [
-            {
-              "Name": "writer",
-              "Type": "System.IO.BinaryWriter"
-            },
-            {
-              "Name": "claim",
-              "Type": "System.Security.Claims.Claim"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Read",
-          "Parameters": [
-            {
-              "Name": "reader",
-              "Type": "System.IO.BinaryReader"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationTicket",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ReadIdentity",
-          "Parameters": [
-            {
-              "Name": "reader",
-              "Type": "System.IO.BinaryReader"
-            }
-          ],
-          "ReturnType": "System.Security.Claims.ClaimsIdentity",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ReadClaim",
-          "Parameters": [
-            {
-              "Name": "reader",
-              "Type": "System.IO.BinaryReader"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            }
-          ],
-          "ReturnType": "System.Security.Claims.Claim",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.BaseContext<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Scheme",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationScheme",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Options",
-          "Parameters": [],
-          "ReturnType": "T0",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_HttpContext",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.HttpContext",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Request",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.HttpRequest",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Response",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.HttpResponse",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "T0"
-            }
-          ],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.HandleRequestContext<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.BaseContext<T0>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Result",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Result",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.HandleRequestResult"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleResponse",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SkipHandler",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "T0"
-            }
-          ],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.PrincipalContext<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "BaseType": "Microsoft.AspNetCore.Authentication.PropertiesContext<T0>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Principal",
-          "Parameters": [],
-          "ReturnType": "System.Security.Claims.ClaimsPrincipal",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Principal",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "T0"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.PropertiesContext<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "BaseType": "Microsoft.AspNetCore.Authentication.BaseContext<T0>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Properties",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationProperties",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Properties",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "T0"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.RedirectContext<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.PropertiesContext<T0>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_RedirectUri",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RedirectUri",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "T0"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            },
-            {
-              "Name": "redirectUri",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "BaseType": "Microsoft.AspNetCore.Authentication.HandleRequestContext<T0>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Principal",
-          "Parameters": [],
-          "ReturnType": "System.Security.Claims.ClaimsPrincipal",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Principal",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Properties",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationProperties",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Properties",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Success",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [
-            {
-              "Name": "failure",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [
-            {
-              "Name": "failureMessage",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "T0"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_OnRemoteFailure",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.RemoteFailureContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnRemoteFailure",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.RemoteFailureContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnTicketReceived",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authentication.TicketReceivedContext, System.Threading.Tasks.Task>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnTicketReceived",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Authentication.TicketReceivedContext, System.Threading.Tasks.Task>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RemoteFailure",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.RemoteFailureContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "TicketReceived",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authentication.TicketReceivedContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.RemoteFailureContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.HandleRequestContext<Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Failure",
-          "Parameters": [],
-          "ReturnType": "System.Exception",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Failure",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Properties",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationProperties",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Properties",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions"
-            },
-            {
-              "Name": "failure",
-              "Type": "System.Exception"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.ResultContext<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "BaseType": "Microsoft.AspNetCore.Authentication.BaseContext<T0>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Principal",
-          "Parameters": [],
-          "ReturnType": "System.Security.Claims.ClaimsPrincipal",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Principal",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Properties",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationProperties",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Properties",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Result",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticateResult",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Success",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "NoResult",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [
-            {
-              "Name": "failure",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [
-            {
-              "Name": "failureMessage",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "T0"
-            }
-          ],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.TicketReceivedContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationContext<Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ReturnUri",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ReturnUri",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "scheme",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationScheme"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions"
-            },
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationTicket"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticateResult",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Handled",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Skipped",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Success",
-          "Parameters": [
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationTicket"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [
-            {
-              "Name": "failure",
-              "Type": "System.Exception"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [
-            {
-              "Name": "failure",
-              "Type": "System.Exception"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [
-            {
-              "Name": "failureMessage",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [
-            {
-              "Name": "failureMessage",
-              "Type": "System.String"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Handle",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "SkipHandler",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.HandleRequestResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.ISystemClock",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_UtcNow",
-          "Parameters": [],
-          "ReturnType": "System.DateTimeOffset",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.PolicySchemeHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.SignInAuthenticationHandler<Microsoft.AspNetCore.Authentication.PolicySchemeOptions>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "HandleChallengeAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleForbiddenAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleSignInAsync",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleSignOutAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<Microsoft.AspNetCore.Authentication.PolicySchemeOptions>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.PolicySchemeOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IAuthenticationRequestHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_SignInScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CreateEventsAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Object>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ShouldHandleRequestAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Boolean>",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRequestAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<System.Boolean>",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationRequestHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRemoteAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.HandleRequestResult>",
-          "Virtual": true,
-          "Abstract": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleAuthenticateAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleForbiddenAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "GenerateCorrelationId",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ValidateCorrelationId",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Boolean",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<T0>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "New": true,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [
-            {
-              "Name": "scheme",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Validate",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_BackchannelTimeout",
-          "Parameters": [],
-          "ReturnType": "System.TimeSpan",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_BackchannelTimeout",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.TimeSpan"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_BackchannelHttpHandler",
-          "Parameters": [],
-          "ReturnType": "System.Net.Http.HttpMessageHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_BackchannelHttpHandler",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Net.Http.HttpMessageHandler"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Backchannel",
-          "Parameters": [],
-          "ReturnType": "System.Net.Http.HttpClient",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Backchannel",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Net.Http.HttpClient"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_DataProtectionProvider",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_DataProtectionProvider",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtectionProvider"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CallbackPath",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.PathString",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CallbackPath",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.PathString"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SignInScheme",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SignInScheme",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_RemoteAuthenticationTimeout",
-          "Parameters": [],
-          "ReturnType": "System.TimeSpan",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_RemoteAuthenticationTimeout",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.TimeSpan"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Events",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Events",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authentication.RemoteAuthenticationEvents"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_SaveTokens",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_SaveTokens",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CorrelationCookie",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CorrelationCookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieBuilder"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.SignInAuthenticationHandler<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "BaseType": "Microsoft.AspNetCore.Authentication.SignOutAuthenticationHandler<T0>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IAuthenticationSignInHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "SignInAsync",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationSignInHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleSignInAsync",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Abstract": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<T0>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "New": true,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.SignOutAuthenticationHandler<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "BaseType": "Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.IAuthenticationSignOutHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "SignOutAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.IAuthenticationSignOutHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleSignOutAsync",
-          "Parameters": [
-            {
-              "Name": "properties",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticationProperties"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Abstract": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptionsMonitor<T0>"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            },
-            {
-              "Name": "encoder",
-              "Type": "System.Text.Encodings.Web.UrlEncoder"
-            },
-            {
-              "Name": "clock",
-              "Type": "Microsoft.AspNetCore.Authentication.ISystemClock"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TOptions",
-          "ParameterPosition": 0,
-          "New": true,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authentication.SystemClock",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authentication.ISystemClock"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_UtcNow",
-          "Parameters": [],
-          "ReturnType": "System.DateTimeOffset",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authentication.ISystemClock",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.AuthAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseAuthentication",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.AuthenticationServiceCollectionExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddAuthentication",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddAuthentication",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            },
-            {
-              "Name": "defaultScheme",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddAuthentication",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.AuthenticationOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authentication.AuthenticationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddScheme<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureScheme",
-              "Type": "System.Action<Microsoft.AspNetCore.Authentication.AuthenticationSchemeBuilder>"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.Extensions.DependencyInjection.IServiceCollection",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>"
-              ]
-            }
-          ]
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddScheme<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.Extensions.DependencyInjection.IServiceCollection",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>"
-              ]
-            }
-          ]
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddScheme<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.Extensions.DependencyInjection.IServiceCollection",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>"
-              ]
-            }
-          ]
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddRemoteScheme<T0, T1>",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            },
-            {
-              "Name": "authenticationScheme",
-              "Type": "System.String"
-            },
-            {
-              "Name": "displayName",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configureOptions",
-              "Type": "System.Action<T0>"
-            }
-          ],
-          "ReturnType": "Microsoft.Extensions.DependencyInjection.IServiceCollection",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": [
-            {
-              "ParameterName": "TOptions",
-              "ParameterPosition": 0,
-              "New": true,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions"
-              ]
-            },
-            {
-              "ParameterName": "THandler",
-              "ParameterPosition": 1,
-              "BaseTypeOrInterfaces": [
-                "Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<T0>"
-              ]
-            }
-          ]
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authentication/breakingchanges.netcore.json b/src/Microsoft.AspNetCore.Authentication/breakingchanges.netcore.json
deleted file mode 100644
index d5bc6954e..000000000
--- a/src/Microsoft.AspNetCore.Authentication/breakingchanges.netcore.json
+++ /dev/null
@@ -1,22 +0,0 @@
-  [
-    {
-      "TypeId": "public static class Microsoft.Extensions.DependencyInjection.AuthenticationServiceCollectionExtensions",
-      "MemberId": "public static Microsoft.Extensions.DependencyInjection.IServiceCollection AddRemoteScheme<T0, T1>(this Microsoft.Extensions.DependencyInjection.IServiceCollection services, System.String authenticationScheme, System.String displayName, System.Action<T0> configureOptions) where T0 : Microsoft.AspNetCore.Authentication.RemoteAuthenticationOptions, new() where T1 : Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<T0>",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public static class Microsoft.Extensions.DependencyInjection.AuthenticationServiceCollectionExtensions",
-      "MemberId": "public static Microsoft.Extensions.DependencyInjection.IServiceCollection AddScheme<T0, T1>(this Microsoft.Extensions.DependencyInjection.IServiceCollection services, System.String authenticationScheme, System.Action<T0> configureOptions) where T0 : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions, new() where T1 : Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public static class Microsoft.Extensions.DependencyInjection.AuthenticationServiceCollectionExtensions",
-      "MemberId": "public static Microsoft.Extensions.DependencyInjection.IServiceCollection AddScheme<T0, T1>(this Microsoft.Extensions.DependencyInjection.IServiceCollection services, System.String authenticationScheme, System.String displayName, System.Action<Microsoft.AspNetCore.Authentication.AuthenticationSchemeBuilder> configureScheme, System.Action<T0> configureOptions) where T0 : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions, new() where T1 : Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>",
-      "Kind": "Removal"
-    },
-    {
-      "TypeId": "public static class Microsoft.Extensions.DependencyInjection.AuthenticationServiceCollectionExtensions",
-      "MemberId": "public static Microsoft.Extensions.DependencyInjection.IServiceCollection AddScheme<T0, T1>(this Microsoft.Extensions.DependencyInjection.IServiceCollection services, System.String authenticationScheme, System.String displayName, System.Action<T0> configureOptions) where T0 : Microsoft.AspNetCore.Authentication.AuthenticationSchemeOptions, new() where T1 : Microsoft.AspNetCore.Authentication.AuthenticationHandler<T0>",
-      "Kind": "Removal"
-    }
-  ]
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationAppBuilderExtensions.cs
deleted file mode 100644
index 66f0eb6f1..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationAppBuilderExtensions.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authorization;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add authorization capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class AuthorizationAppBuilderExtensions
-    {
-        /// <summary>
-        /// Adds the <see cref="AuthorizationMiddleware"/> to the specified <see cref="IApplicationBuilder"/>, which enables authorization capabilities.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the middleware to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public static IApplicationBuilder UseAuthorization(this IApplicationBuilder app)
-        {
-            if (app == null)
-            {
-                throw new ArgumentNullException(nameof(app));
-            }
-
-            return app.UseMiddleware<AuthorizationMiddleware>();
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationEndpointConventionBuilderExtensions.cs b/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationEndpointConventionBuilderExtensions.cs
deleted file mode 100644
index 81b05d70a..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationEndpointConventionBuilderExtensions.cs
+++ /dev/null
@@ -1,50 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using Microsoft.AspNetCore.Authorization;
-using Microsoft.AspNetCore.Routing;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    public static class AuthorizationEndpointConventionBuilderExtensions
-    {
-        public static IEndpointConventionBuilder RequireAuthorization(this IEndpointConventionBuilder builder, params IAuthorizeData[] authorizeData)
-        {
-            if (builder == null)
-            {
-                throw new ArgumentNullException(nameof(builder));
-            }
-
-            if (authorizeData == null)
-            {
-                throw new ArgumentNullException(nameof(authorizeData));
-            }
-
-            builder.Apply(endpointBuilder =>
-            {
-                foreach (var data in authorizeData)
-                {
-                    endpointBuilder.Metadata.Add(data);
-                }
-            });
-            return builder;
-        }
-
-        public static IEndpointConventionBuilder RequireAuthorization(this IEndpointConventionBuilder builder, params string[] policyNames)
-        {
-            if (builder == null)
-            {
-                throw new ArgumentNullException(nameof(builder));
-            }
-
-            if (policyNames == null)
-            {
-                throw new ArgumentNullException(nameof(policyNames));
-            }
-
-            return builder.RequireAuthorization(policyNames.Select(n => new AuthorizeAttribute(n)).ToArray());
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationMiddleware.cs b/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationMiddleware.cs
deleted file mode 100644
index 1da5b123f..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/AuthorizationMiddleware.cs
+++ /dev/null
@@ -1,104 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authorization.Policy;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Endpoints;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.Extensions.DependencyInjection;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    public class AuthorizationMiddleware
-    {
-        private readonly RequestDelegate _next;
-        private readonly IAuthorizationPolicyProvider _policyProvider;
-
-        public AuthorizationMiddleware(RequestDelegate next, IAuthorizationPolicyProvider policyProvider)
-        {
-            if (next == null)
-            {
-                throw new ArgumentNullException(nameof(next));
-            }
-
-            if (policyProvider == null)
-            {
-                throw new ArgumentNullException(nameof(policyProvider));
-            }
-
-            _next = next;
-            _policyProvider = policyProvider;
-        }
-
-        public async Task Invoke(HttpContext context)
-        {
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-
-            var endpoint = context.GetEndpoint();
-            var authorizeData = endpoint?.Metadata.GetOrderedMetadata<IAuthorizeData>() ?? Array.Empty<IAuthorizeData>();
-            var policy = await AuthorizationPolicy.CombineAsync(_policyProvider, authorizeData);
-            if (policy == null)
-            {
-                await _next(context);
-                return;
-            }
-
-            // Policy evaluator has transient lifetime so it fetched from request services instead of injecting in constructor
-            var policyEvaluator = context.RequestServices.GetRequiredService<IPolicyEvaluator>();
-
-            var authenticateResult = await policyEvaluator.AuthenticateAsync(policy, context);
-
-            // Allow Anonymous skips all authorization
-            if (endpoint?.Metadata.GetMetadata<IAllowAnonymous>() != null)
-            {
-                await _next(context);
-                return;
-            }
-
-            // Note that the resource will be null if there is no matched endpoint
-            var authorizeResult = await policyEvaluator.AuthorizeAsync(policy, authenticateResult, context, resource: endpoint);
-
-            if (authorizeResult.Challenged)
-            {
-                if (policy.AuthenticationSchemes.Any())
-                {
-                    foreach (var scheme in policy.AuthenticationSchemes)
-                    {
-                        await context.ChallengeAsync(scheme);
-                    }
-                }
-                else
-                {
-                    await context.ChallengeAsync();
-                }
-
-                return;
-            }
-            else if (authorizeResult.Forbidden)
-            {
-                if (policy.AuthenticationSchemes.Any())
-                {
-                    foreach (var scheme in policy.AuthenticationSchemes)
-                    {
-                        await context.ForbidAsync(scheme);
-                    }
-                }
-                else
-                {
-                    await context.ForbidAsync();
-                }
-
-                return;
-            }
-
-            await _next(context);
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/IPolicyEvaluator.cs b/src/Microsoft.AspNetCore.Authorization.Policy/IPolicyEvaluator.cs
deleted file mode 100644
index dd5e6fc03..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/IPolicyEvaluator.cs
+++ /dev/null
@@ -1,40 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authorization.Policy
-{
-    /// <summary>
-    /// Base class for authorization handlers that need to be called for a specific requirement type.
-    /// </summary>
-    public interface IPolicyEvaluator
-    {
-        /// <summary>
-        /// Does authentication for <see cref="AuthorizationPolicy.AuthenticationSchemes"/> and sets the resulting
-        /// <see cref="ClaimsPrincipal"/> to <see cref="HttpContext.User"/>.  If no schemes are set, this is a no-op.
-        /// </summary>
-        /// <param name="policy">The <see cref="AuthorizationPolicy"/>.</param>
-        /// <param name="context">The <see cref="HttpContext"/>.</param>
-        /// <returns><see cref="AuthenticateResult.Success"/> unless all schemes specified by <see cref="AuthorizationPolicy.AuthenticationSchemes"/> fail to authenticate.  </returns>
-        Task<AuthenticateResult> AuthenticateAsync(AuthorizationPolicy policy, HttpContext context);
-
-        /// <summary>
-        /// Attempts authorization for a policy using <see cref="IAuthorizationService"/>.
-        /// </summary>
-        /// <param name="policy">The <see cref="AuthorizationPolicy"/>.</param>
-        /// <param name="authenticationResult">The result of a call to <see cref="AuthenticateAsync(AuthorizationPolicy, HttpContext)"/>.</param>
-        /// <param name="context">The <see cref="HttpContext"/>.</param>
-        /// <param name="resource">
-        /// An optional resource the policy should be checked with.
-        /// If a resource is not required for policy evaluation you may pass null as the value.
-        /// </param>
-        /// <returns>Returns <see cref="PolicyAuthorizationResult.Success"/> if authorization succeeds.
-        /// Otherwise returns <see cref="PolicyAuthorizationResult.Forbid"/> if <see cref="AuthenticateResult.Succeeded"/>, otherwise
-        /// returns  <see cref="PolicyAuthorizationResult.Challenge"/></returns>
-        Task<PolicyAuthorizationResult> AuthorizeAsync(AuthorizationPolicy policy, AuthenticateResult authenticationResult, HttpContext context, object resource);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/Microsoft.AspNetCore.Authorization.Policy.csproj b/src/Microsoft.AspNetCore.Authorization.Policy/Microsoft.AspNetCore.Authorization.Policy.csproj
deleted file mode 100644
index d3ad99a51..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/Microsoft.AspNetCore.Authorization.Policy.csproj
+++ /dev/null
@@ -1,22 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core authorization policy helper classes.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591;NU1605</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authorization</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\Microsoft.AspNetCore.Authorization\Microsoft.AspNetCore.Authorization.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Authentication.Abstractions" Version="$(MicrosoftAspNetCoreAuthenticationAbstractionsPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Http.Abstractions" Version="$(MicrosoftAspNetCoreHttpAbstractionsPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Routing" Version="$(MicrosoftAspNetCoreRoutingPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.SecurityHelper.Sources" PrivateAssets="All" Version="$(MicrosoftExtensionsSecurityHelperSourcesPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/PolicyAuthorizationResult.cs b/src/Microsoft.AspNetCore.Authorization.Policy/PolicyAuthorizationResult.cs
deleted file mode 100644
index d7d481dcd..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/PolicyAuthorizationResult.cs
+++ /dev/null
@@ -1,35 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authorization.Policy
-{
-    public class PolicyAuthorizationResult
-    {
-        private PolicyAuthorizationResult() { }
-
-        /// <summary>
-        /// If true, means the callee should challenge and try again.
-        /// </summary>
-        public bool Challenged { get; private set; }
-
-        /// <summary>
-        /// Authorization was forbidden.
-        /// </summary>
-        public bool Forbidden { get; private set; }
-
-        /// <summary>
-        /// Authorization was successful.
-        /// </summary>
-        public bool Succeeded { get; private set; }
-
-        public static PolicyAuthorizationResult Challenge()
-            => new PolicyAuthorizationResult { Challenged = true };
-
-        public static PolicyAuthorizationResult Forbid()
-            => new PolicyAuthorizationResult { Forbidden = true };
-
-        public static PolicyAuthorizationResult Success()
-            => new PolicyAuthorizationResult { Succeeded = true };
-
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/PolicyEvaluator.cs b/src/Microsoft.AspNetCore.Authorization.Policy/PolicyEvaluator.cs
deleted file mode 100644
index 3100ff4d3..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/PolicyEvaluator.cs
+++ /dev/null
@@ -1,96 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Internal;
-
-namespace Microsoft.AspNetCore.Authorization.Policy
-{
-    public class PolicyEvaluator : IPolicyEvaluator
-    {
-        private readonly IAuthorizationService _authorization;
-
-        /// <summary>
-        /// Constructor
-        /// </summary>
-        /// <param name="authorization">The authorization service.</param>
-        public PolicyEvaluator(IAuthorizationService authorization)
-        {
-            _authorization = authorization;
-        }
-
-        /// <summary>
-        /// Does authentication for <see cref="AuthorizationPolicy.AuthenticationSchemes"/> and sets the resulting
-        /// <see cref="ClaimsPrincipal"/> to <see cref="HttpContext.User"/>.  If no schemes are set, this is a no-op.
-        /// </summary>
-        /// <param name="policy">The <see cref="AuthorizationPolicy"/>.</param>
-        /// <param name="context">The <see cref="HttpContext"/>.</param>
-        /// <returns><see cref="AuthenticateResult.Success"/> unless all schemes specified by <see cref="AuthorizationPolicy.AuthenticationSchemes"/> failed to authenticate.  </returns>
-        public virtual async Task<AuthenticateResult> AuthenticateAsync(AuthorizationPolicy policy, HttpContext context)
-        {
-            if (policy.AuthenticationSchemes != null && policy.AuthenticationSchemes.Count > 0)
-            {
-                ClaimsPrincipal newPrincipal = null;
-                foreach (var scheme in policy.AuthenticationSchemes)
-                {
-                    var result = await context.AuthenticateAsync(scheme);
-                    if (result != null && result.Succeeded)
-                    {
-                        newPrincipal = SecurityHelper.MergeUserPrincipal(newPrincipal, result.Principal);
-                    }
-                }
-
-                if (newPrincipal != null)
-                {
-                    context.User = newPrincipal;
-                    return AuthenticateResult.Success(new AuthenticationTicket(newPrincipal, string.Join(";", policy.AuthenticationSchemes)));
-                }
-                else
-                {
-                    context.User = new ClaimsPrincipal(new ClaimsIdentity());
-                    return AuthenticateResult.NoResult();
-                }
-            }
-
-            return (context.User?.Identity?.IsAuthenticated ?? false) 
-                ? AuthenticateResult.Success(new AuthenticationTicket(context.User, "context.User"))
-                : AuthenticateResult.NoResult();
-        }
-
-        /// <summary>
-        /// Attempts authorization for a policy using <see cref="IAuthorizationService"/>.
-        /// </summary>
-        /// <param name="policy">The <see cref="AuthorizationPolicy"/>.</param>
-        /// <param name="authenticationResult">The result of a call to <see cref="AuthenticateAsync(AuthorizationPolicy, HttpContext)"/>.</param>
-        /// <param name="context">The <see cref="HttpContext"/>.</param>
-        /// <param name="resource">
-        /// An optional resource the policy should be checked with.
-        /// If a resource is not required for policy evaluation you may pass null as the value.
-        /// </param>
-        /// <returns>Returns <see cref="PolicyAuthorizationResult.Success"/> if authorization succeeds.
-        /// Otherwise returns <see cref="PolicyAuthorizationResult.Forbid"/> if <see cref="AuthenticateResult.Succeeded"/>, otherwise
-        /// returns  <see cref="PolicyAuthorizationResult.Challenge"/></returns>
-        public virtual async Task<PolicyAuthorizationResult> AuthorizeAsync(AuthorizationPolicy policy, AuthenticateResult authenticationResult, HttpContext context, object resource)
-        {
-            if (policy == null)
-            {
-                throw new ArgumentNullException(nameof(policy));
-            }
-
-            var result = await _authorization.AuthorizeAsync(context.User, resource, policy);
-            if (result.Succeeded)
-            {
-                return PolicyAuthorizationResult.Success();
-            }
-
-            // If authentication was successful, return forbidden, otherwise challenge
-            return (authenticationResult.Succeeded) 
-                ? PolicyAuthorizationResult.Forbid() 
-                : PolicyAuthorizationResult.Challenge();
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/PolicyServiceCollectionExtensions.cs b/src/Microsoft.AspNetCore.Authorization.Policy/PolicyServiceCollectionExtensions.cs
deleted file mode 100644
index 9b72a5cab..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/PolicyServiceCollectionExtensions.cs
+++ /dev/null
@@ -1,31 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authorization.Policy;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    /// <summary>
-    /// Extension methods for setting up authorization services in an <see cref="IServiceCollection" />.
-    /// </summary>
-    public static class PolicyServiceCollectionExtensions
-    {
-        /// <summary>
-        /// Adds authorization policy services to the specified <see cref="IServiceCollection" />. 
-        /// </summary>
-        /// <param name="services">The <see cref="IServiceCollection" /> to add services to.</param>
-        /// <returns>The <see cref="IServiceCollection"/> so that additional calls can be chained.</returns>
-        public static IServiceCollection AddAuthorizationPolicyEvaluator(this IServiceCollection services)
-        {
-            if (services == null)
-            {
-                throw new ArgumentNullException(nameof(services));
-            }
-            
-            services.TryAdd(ServiceDescriptor.Transient<IPolicyEvaluator, PolicyEvaluator>());
-            return services;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization.Policy/baseline.netcore.json b/src/Microsoft.AspNetCore.Authorization.Policy/baseline.netcore.json
deleted file mode 100644
index e8708538d..000000000
--- a/src/Microsoft.AspNetCore.Authorization.Policy/baseline.netcore.json
+++ /dev/null
@@ -1,211 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authorization.Policy, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Policy.IPolicyEvaluator",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AuthenticateAsync",
-          "Parameters": [
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            },
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            },
-            {
-              "Name": "authenticationResult",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticateResult"
-            },
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.Policy.PolicyAuthorizationResult>",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Policy.PolicyAuthorizationResult",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Challenged",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Forbidden",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Succeeded",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Challenge",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.Policy.PolicyAuthorizationResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Forbid",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.Policy.PolicyAuthorizationResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Success",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.Policy.PolicyAuthorizationResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Policy.PolicyEvaluator",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.Policy.IPolicyEvaluator"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AuthenticateAsync",
-          "Parameters": [
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            },
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authentication.AuthenticateResult>",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.Policy.IPolicyEvaluator",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            },
-            {
-              "Name": "authenticationResult",
-              "Type": "Microsoft.AspNetCore.Authentication.AuthenticateResult"
-            },
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.Policy.PolicyAuthorizationResult>",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.Policy.IPolicyEvaluator",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "authorization",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationService"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.PolicyServiceCollectionExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddAuthorizationPolicyEvaluator",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            }
-          ],
-          "ReturnType": "Microsoft.Extensions.DependencyInjection.IServiceCollection",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/AllowAnonymousAttribute.cs b/src/Microsoft.AspNetCore.Authorization/AllowAnonymousAttribute.cs
deleted file mode 100644
index cb3f1b172..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AllowAnonymousAttribute.cs
+++ /dev/null
@@ -1,15 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Specifies that the class or method that this attribute is applied to does not require authorization.
-    /// </summary>
-    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = false, Inherited = true)]
-    public class AllowAnonymousAttribute : Attribute, IAllowAnonymous
-    {
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationFailure.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationFailure.cs
deleted file mode 100644
index 89956c9aa..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationFailure.cs
+++ /dev/null
@@ -1,46 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Security.Claims;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Encapsulates a failure result of <see cref="IAuthorizationService.AuthorizeAsync(ClaimsPrincipal, object, IEnumerable{IAuthorizationRequirement})"/>.
-    /// </summary>
-    public class AuthorizationFailure
-    {
-        private AuthorizationFailure() { }
-
-        /// <summary>
-        /// Failure was due to <see cref="AuthorizationHandlerContext.Fail"/> being called.
-        /// </summary>
-        public bool FailCalled { get; private set; }
-
-        /// <summary>
-        /// Failure was due to these requirements not being met via <see cref="AuthorizationHandlerContext.Succeed(IAuthorizationRequirement)"/>.
-        /// </summary>
-        public IEnumerable<IAuthorizationRequirement> FailedRequirements { get; private set; }
-
-        /// <summary>
-        /// Return a failure due to <see cref="AuthorizationHandlerContext.Fail"/> being called.
-        /// </summary>
-        /// <returns>The failure.</returns>
-        public static AuthorizationFailure ExplicitFail()
-            => new AuthorizationFailure
-            {
-                FailCalled = true,
-                FailedRequirements = new IAuthorizationRequirement[0]
-            };
-
-        /// <summary>
-        /// Return a failure due to some requirements not being met via <see cref="AuthorizationHandlerContext.Succeed(IAuthorizationRequirement)"/>.
-        /// </summary>
-        /// <param name="failed">The requirements that were not met.</param>
-        /// <returns>The failure.</returns>
-        public static AuthorizationFailure Failed(IEnumerable<IAuthorizationRequirement> failed)
-            => new AuthorizationFailure { FailedRequirements = failed };
-
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationHandler.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationHandler.cs
deleted file mode 100644
index a4a923c3c..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationHandler.cs
+++ /dev/null
@@ -1,68 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Linq;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Base class for authorization handlers that need to be called for a specific requirement type.
-    /// </summary>
-    /// <typeparam name="TRequirement">The type of the requirement to handle.</typeparam>
-    public abstract class AuthorizationHandler<TRequirement> : IAuthorizationHandler
-            where TRequirement : IAuthorizationRequirement
-    {
-        /// <summary>
-        /// Makes a decision if authorization is allowed.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        public virtual async Task HandleAsync(AuthorizationHandlerContext context)
-        {
-            foreach (var req in context.Requirements.OfType<TRequirement>())
-            {
-                await HandleRequirementAsync(context, req);
-            }
-        }
-
-        /// <summary>
-        /// Makes a decision if authorization is allowed based on a specific requirement.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        /// <param name="requirement">The requirement to evaluate.</param>
-        protected abstract Task HandleRequirementAsync(AuthorizationHandlerContext context, TRequirement requirement);
-    }
-
-    /// <summary>
-    /// Base class for authorization handlers that need to be called for specific requirement and
-    /// resource types.
-    /// </summary>
-    /// <typeparam name="TRequirement">The type of the requirement to evaluate.</typeparam>
-    /// <typeparam name="TResource">The type of the resource to evaluate.</typeparam>
-    public abstract class AuthorizationHandler<TRequirement, TResource> : IAuthorizationHandler
-        where TRequirement : IAuthorizationRequirement
-    {
-        /// <summary>
-        /// Makes a decision if authorization is allowed.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        public virtual async Task HandleAsync(AuthorizationHandlerContext context)
-        {
-            if (context.Resource is TResource)
-            {
-                foreach (var req in context.Requirements.OfType<TRequirement>())
-                {
-                    await HandleRequirementAsync(context, req, (TResource)context.Resource);
-                }
-            }
-        }
-
-        /// <summary>
-        /// Makes a decision if authorization is allowed based on a specific requirement and resource.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        /// <param name="requirement">The requirement to evaluate.</param>
-        /// <param name="resource">The resource to evaluate.</param>
-        protected abstract Task HandleRequirementAsync(AuthorizationHandlerContext context, TRequirement requirement, TResource resource);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationHandlerContext.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationHandlerContext.cs
deleted file mode 100644
index b6378e407..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationHandlerContext.cs
+++ /dev/null
@@ -1,98 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Security.Claims;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Contains authorization information used by <see cref="IAuthorizationHandler"/>.
-    /// </summary>
-    public class AuthorizationHandlerContext
-    {
-        private HashSet<IAuthorizationRequirement> _pendingRequirements;
-        private bool _failCalled;
-        private bool _succeedCalled;
-
-        /// <summary>
-        /// Creates a new instance of <see cref="AuthorizationHandlerContext"/>.
-        /// </summary>
-        /// <param name="requirements">A collection of all the <see cref="IAuthorizationRequirement"/> for the current authorization action.</param>
-        /// <param name="user">A <see cref="ClaimsPrincipal"/> representing the current user.</param>
-        /// <param name="resource">An optional resource to evaluate the <paramref name="requirements"/> against.</param>
-        public AuthorizationHandlerContext(
-            IEnumerable<IAuthorizationRequirement> requirements,
-            ClaimsPrincipal user,
-            object resource)
-        {
-            if (requirements == null)
-            {
-                throw new ArgumentNullException(nameof(requirements));
-            }
-
-            Requirements = requirements;
-            User = user;
-            Resource = resource;
-            _pendingRequirements = new HashSet<IAuthorizationRequirement>(requirements);
-        }
-
-        /// <summary>
-        /// The collection of all the <see cref="IAuthorizationRequirement"/> for the current authorization action.
-        /// </summary>
-        public virtual IEnumerable<IAuthorizationRequirement> Requirements { get; }
-
-        /// <summary>
-        /// The <see cref="ClaimsPrincipal"/> representing the current user.
-        /// </summary>
-        public virtual ClaimsPrincipal User { get; }
-
-        /// <summary>
-        /// The optional resource to evaluate the <see cref="AuthorizationHandlerContext.Requirements"/> against.
-        /// </summary>
-        public virtual object Resource { get; }
-
-        /// <summary>
-        /// Gets the requirements that have not yet been marked as succeeded.
-        /// </summary>
-        public virtual IEnumerable<IAuthorizationRequirement> PendingRequirements { get { return _pendingRequirements; } }
-
-        /// <summary>
-        /// Flag indicating whether the current authorization processing has failed.
-        /// </summary>
-        public virtual bool HasFailed { get { return _failCalled; } }
-
-        /// <summary>
-        /// Flag indicating whether the current authorization processing has succeeded.
-        /// </summary>
-        public virtual bool HasSucceeded
-        {
-            get
-            {
-                return !_failCalled && _succeedCalled && !PendingRequirements.Any();
-            }
-        }
-
-        /// <summary>
-        /// Called to indicate <see cref="AuthorizationHandlerContext.HasSucceeded"/> will
-        /// never return true, even if all requirements are met.
-        /// </summary>
-        public virtual void Fail()
-        {
-            _failCalled = true;
-        }
-
-        /// <summary>
-        /// Called to mark the specified <paramref name="requirement"/> as being
-        /// successfully evaluated.
-        /// </summary>
-        /// <param name="requirement">The requirement whose evaluation has succeeded.</param>
-        public virtual void Succeed(IAuthorizationRequirement requirement)
-        {
-            _succeedCalled = true;
-            _pendingRequirements.Remove(requirement);
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationOptions.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationOptions.cs
deleted file mode 100644
index f0c5527d2..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationOptions.cs
+++ /dev/null
@@ -1,99 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Provides programmatic configuration used by <see cref="IAuthorizationService"/> and <see cref="IAuthorizationPolicyProvider"/>.
-    /// </summary>
-    public class AuthorizationOptions
-    {
-        private IDictionary<string, AuthorizationPolicy> PolicyMap { get; } = new Dictionary<string, AuthorizationPolicy>(StringComparer.OrdinalIgnoreCase);
-
-        /// <summary>
-        /// Determines whether authentication handlers should be invoked after a failure.
-        /// Defaults to true.
-        /// </summary>
-        public bool InvokeHandlersAfterFailure { get; set; } = true;
-
-        /// <summary>
-        /// Gets or sets the default authorization policy. Defaults to require authenticated users.
-        /// </summary>
-        /// <remarks>
-        /// The default policy used when evaluating <see cref="IAuthorizeData"/> with no policy name specified.
-        /// </remarks>
-        public AuthorizationPolicy DefaultPolicy { get; set; } = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build();
-
-        /// <summary>
-        /// Gets or sets the required authorization policy. Defaults to null.
-        /// </summary>
-        /// <remarks>
-        /// By default the required policy is null.
-        /// 
-        /// If a required policy has been specified then it is always evaluated, even if there are no
-        /// <see cref="IAuthorizeData"/> instances for a resource. If a resource has <see cref="IAuthorizeData"/>
-        /// then they are evaluated together with the required policy.
-        /// </remarks>
-        public AuthorizationPolicy RequiredPolicy { get; set; }
-
-        /// <summary>
-        /// Add an authorization policy with the provided name.
-        /// </summary>
-        /// <param name="name">The name of the policy.</param>
-        /// <param name="policy">The authorization policy.</param>
-        public void AddPolicy(string name, AuthorizationPolicy policy)
-        {
-            if (name == null)
-            {
-                throw new ArgumentNullException(nameof(name));
-            }
-
-            if (policy == null)
-            {
-                throw new ArgumentNullException(nameof(policy));
-            }
-
-            PolicyMap[name] = policy;
-        }
-
-        /// <summary>
-        /// Add a policy that is built from a delegate with the provided name.
-        /// </summary>
-        /// <param name="name">The name of the policy.</param>
-        /// <param name="configurePolicy">The delegate that will be used to build the policy.</param>
-        public void AddPolicy(string name, Action<AuthorizationPolicyBuilder> configurePolicy)
-        {
-            if (name == null)
-            {
-                throw new ArgumentNullException(nameof(name));
-            }
-
-            if (configurePolicy == null)
-            {
-                throw new ArgumentNullException(nameof(configurePolicy));
-            }
-
-            var policyBuilder = new AuthorizationPolicyBuilder();
-            configurePolicy(policyBuilder);
-            PolicyMap[name] = policyBuilder.Build();
-        }
-
-        /// <summary>
-        /// Returns the policy for the specified name, or null if a policy with the name does not exist.
-        /// </summary>
-        /// <param name="name">The name of the policy to return.</param>
-        /// <returns>The policy for the specified name, or null if a policy with the name does not exist.</returns>
-        public AuthorizationPolicy GetPolicy(string name)
-        {
-            if (name == null)
-            {
-                throw new ArgumentNullException(nameof(name));
-            }
-
-            return PolicyMap.ContainsKey(name) ? PolicyMap[name] : null;
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationPolicy.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationPolicy.cs
deleted file mode 100644
index b3b54f300..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationPolicy.cs
+++ /dev/null
@@ -1,193 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Represents a collection of authorization requirements and the scheme or 
-    /// schemes they are evaluated against, all of which must succeed
-    /// for authorization to succeed.
-    /// </summary>
-    public class AuthorizationPolicy
-    {
-        /// <summary>
-        /// Creates a new instance of <see cref="AuthorizationPolicy"/>.
-        /// </summary>
-        /// <param name="requirements">
-        /// The list of <see cref="IAuthorizationRequirement"/>s which must succeed for
-        /// this policy to be successful.
-        /// </param>
-        /// <param name="authenticationSchemes">
-        /// The authentication schemes the <paramref name="requirements"/> are evaluated against.
-        /// </param>
-        public AuthorizationPolicy(IEnumerable<IAuthorizationRequirement> requirements, IEnumerable<string> authenticationSchemes)
-        {
-            if (requirements == null)
-            {
-                throw new ArgumentNullException(nameof(requirements));
-            }
-
-            if (authenticationSchemes == null)
-            {
-                throw new ArgumentNullException(nameof(authenticationSchemes));
-            }
-
-            if (requirements.Count() == 0)
-            {
-                throw new InvalidOperationException(Resources.Exception_AuthorizationPolicyEmpty);
-            }
-            Requirements = new List<IAuthorizationRequirement>(requirements).AsReadOnly();
-            AuthenticationSchemes = new List<string>(authenticationSchemes).AsReadOnly();
-        }
-
-        /// <summary>
-        /// Gets a readonly list of <see cref="IAuthorizationRequirement"/>s which must succeed for
-        /// this policy to be successful.
-        /// </summary>
-        public IReadOnlyList<IAuthorizationRequirement> Requirements { get; }
-
-        /// <summary>
-        /// Gets a readonly list of the authentication schemes the <see cref="AuthorizationPolicy.Requirements"/> 
-        /// are evaluated against.
-        /// </summary>
-        public IReadOnlyList<string> AuthenticationSchemes { get; }
-
-        /// <summary>
-        /// Combines the specified <see cref="AuthorizationPolicy"/> into a single policy.
-        /// </summary>
-        /// <param name="policies">The authorization policies to combine.</param>
-        /// <returns>
-        /// A new <see cref="AuthorizationPolicy"/> which represents the combination of the
-        /// specified <paramref name="policies"/>.
-        /// </returns>
-        public static AuthorizationPolicy Combine(params AuthorizationPolicy[] policies)
-        {
-            if (policies == null)
-            {
-                throw new ArgumentNullException(nameof(policies));
-            }
-
-            return Combine((IEnumerable<AuthorizationPolicy>)policies);
-        }
-
-        /// <summary>
-        /// Combines the specified <see cref="AuthorizationPolicy"/> into a single policy.
-        /// </summary>
-        /// <param name="policies">The authorization policies to combine.</param>
-        /// <returns>
-        /// A new <see cref="AuthorizationPolicy"/> which represents the combination of the
-        /// specified <paramref name="policies"/>.
-        /// </returns>
-        public static AuthorizationPolicy Combine(IEnumerable<AuthorizationPolicy> policies)
-        {
-            if (policies == null)
-            {
-                throw new ArgumentNullException(nameof(policies));
-            }
-
-            var builder = new AuthorizationPolicyBuilder();
-            foreach (var policy in policies)
-            {
-                builder.Combine(policy);
-            }
-            return builder.Build();
-        }
-
-        /// <summary>
-        /// Combines the <see cref="AuthorizationPolicy"/> provided by the specified
-        /// <paramref name="policyProvider"/>.
-        /// </summary>
-        /// <param name="policyProvider">A <see cref="IAuthorizationPolicyProvider"/> which provides the policies to combine.</param>
-        /// <param name="authorizeData">A collection of authorization data used to apply authorization to a resource.</param>
-        /// <returns>
-        /// A new <see cref="AuthorizationPolicy"/> which represents the combination of the
-        /// authorization policies provided by the specified <paramref name="policyProvider"/>.
-        /// </returns>
-        public static async Task<AuthorizationPolicy> CombineAsync(IAuthorizationPolicyProvider policyProvider, IEnumerable<IAuthorizeData> authorizeData)
-        {
-            if (policyProvider == null)
-            {
-                throw new ArgumentNullException(nameof(policyProvider));
-            }
-
-            if (authorizeData == null)
-            {
-                throw new ArgumentNullException(nameof(authorizeData));
-            }
-
-            // Avoid allocating enumerator if the data is known to be empty
-            var skipEnumeratingData = false;
-            if (authorizeData is IList<IAuthorizeData> dataList)
-            {
-                skipEnumeratingData = dataList.Count == 0;
-            }
-
-            AuthorizationPolicyBuilder policyBuilder = null;
-            if (!skipEnumeratingData)
-            {
-                foreach (var authorizeDatum in authorizeData)
-                {
-                    if (policyBuilder == null)
-                    {
-                        policyBuilder = new AuthorizationPolicyBuilder();
-                    }
-
-                    var useDefaultPolicy = true;
-                    if (!string.IsNullOrWhiteSpace(authorizeDatum.Policy))
-                    {
-                        var policy = await policyProvider.GetPolicyAsync(authorizeDatum.Policy);
-                        if (policy == null)
-                        {
-                            throw new InvalidOperationException(Resources.FormatException_AuthorizationPolicyNotFound(authorizeDatum.Policy));
-                        }
-                        policyBuilder.Combine(policy);
-                        useDefaultPolicy = false;
-                    }
-
-                    var rolesSplit = authorizeDatum.Roles?.Split(',');
-                    if (rolesSplit != null && rolesSplit.Any())
-                    {
-                        var trimmedRolesSplit = rolesSplit.Where(r => !string.IsNullOrWhiteSpace(r)).Select(r => r.Trim());
-                        policyBuilder.RequireRole(trimmedRolesSplit);
-                        useDefaultPolicy = false;
-                    }
-
-                    var authTypesSplit = authorizeDatum.AuthenticationSchemes?.Split(',');
-                    if (authTypesSplit != null && authTypesSplit.Any())
-                    {
-                        foreach (var authType in authTypesSplit)
-                        {
-                            if (!string.IsNullOrWhiteSpace(authType))
-                            {
-                                policyBuilder.AuthenticationSchemes.Add(authType.Trim());
-                            }
-                        }
-                    }
-
-                    if (useDefaultPolicy)
-                    {
-                        policyBuilder.Combine(await policyProvider.GetDefaultPolicyAsync());
-                    }
-                }
-            }
-
-            var requiredPolicy = await policyProvider.GetRequiredPolicyAsync();
-            if (requiredPolicy != null)
-            {
-                if (policyBuilder == null)
-                {
-                    policyBuilder = new AuthorizationPolicyBuilder();
-                }
-
-                policyBuilder.Combine(requiredPolicy);
-            }
-
-            return policyBuilder?.Build();
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationPolicyBuilder.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationPolicyBuilder.cs
deleted file mode 100644
index 2f483e37c..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationPolicyBuilder.cs
+++ /dev/null
@@ -1,250 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authorization.Infrastructure;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Used for building policies during application startup.
-    /// </summary>
-    public class AuthorizationPolicyBuilder
-    {
-        /// <summary>
-        /// Creates a new instance of <see cref="AuthorizationPolicyBuilder"/>
-        /// </summary>
-        /// <param name="authenticationSchemes">An array of authentication schemes the policy should be evaluated against.</param>
-        public AuthorizationPolicyBuilder(params string[] authenticationSchemes)
-        {
-            AddAuthenticationSchemes(authenticationSchemes);
-        }
-
-        /// <summary>
-        /// Creates a new instance of <see cref="AuthorizationPolicyBuilder"/>.
-        /// </summary>
-        /// <param name="policy">The <see cref="AuthorizationPolicy"/> to build.</param>
-        public AuthorizationPolicyBuilder(AuthorizationPolicy policy)
-        {
-            Combine(policy);
-        }
-
-        /// <summary>
-        /// Gets or sets a list of <see cref="IAuthorizationRequirement"/>s which must succeed for
-        /// this policy to be successful.
-        /// </summary>
-        public IList<IAuthorizationRequirement> Requirements { get; set; } = new List<IAuthorizationRequirement>();
-
-        /// <summary>
-        /// Gets or sets a list authentication schemes the <see cref="AuthorizationPolicyBuilder.Requirements"/> 
-        /// are evaluated against.
-        /// </summary>
-        public IList<string> AuthenticationSchemes { get; set; } = new List<string>();
-
-        /// <summary>
-        /// Adds the specified authentication <paramref name="schemes"/> to the
-        /// <see cref="AuthorizationPolicyBuilder.AuthenticationSchemes"/> for this instance.
-        /// </summary>
-        /// <param name="schemes">The schemes to add.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder AddAuthenticationSchemes(params string[] schemes)
-        {
-            foreach (var authType in schemes)
-            {
-                AuthenticationSchemes.Add(authType);
-            }
-            return this;
-        }
-
-        /// <summary>
-        /// Adds the specified <paramref name="requirements"/> to the
-        /// <see cref="AuthorizationPolicyBuilder.Requirements"/> for this instance.
-        /// </summary>
-        /// <param name="requirements">The authorization requirements to add.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder AddRequirements(params IAuthorizationRequirement[] requirements)
-        {
-            foreach (var req in requirements)
-            {
-                Requirements.Add(req);
-            }
-            return this;
-        }
-
-        /// <summary>
-        /// Combines the specified <paramref name="policy"/> into the current instance.
-        /// </summary>
-        /// <param name="policy">The <see cref="AuthorizationPolicy"/> to combine.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder Combine(AuthorizationPolicy policy)
-        {
-            if (policy == null)
-            {
-                throw new ArgumentNullException(nameof(policy));
-            }
-
-            AddAuthenticationSchemes(policy.AuthenticationSchemes.ToArray());
-            AddRequirements(policy.Requirements.ToArray());
-            return this;
-        }
-
-        /// <summary>
-        /// Adds a <see cref="ClaimsAuthorizationRequirement"/>
-        /// to the current instance.
-        /// </summary>
-        /// <param name="claimType">The claim type required.</param>
-        /// <param name="allowedValues">Values the claim must process one or more of for evaluation to succeed.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireClaim(string claimType, params string[] allowedValues)
-        {
-            if (claimType == null)
-            {
-                throw new ArgumentNullException(nameof(claimType));
-            }
-
-            return RequireClaim(claimType, (IEnumerable<string>)allowedValues);
-        }
-
-        /// <summary>
-        /// Adds a <see cref="ClaimsAuthorizationRequirement"/>
-        /// to the current instance.
-        /// </summary>
-        /// <param name="claimType">The claim type required.</param>
-        /// <param name="allowedValues">Values the claim must process one or more of for evaluation to succeed.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireClaim(string claimType, IEnumerable<string> allowedValues)
-        {
-            if (claimType == null)
-            {
-                throw new ArgumentNullException(nameof(claimType));
-            }
-
-            Requirements.Add(new ClaimsAuthorizationRequirement(claimType, allowedValues));
-            return this;
-        }
-
-        /// <summary>
-        /// Adds a <see cref="ClaimsAuthorizationRequirement"/>
-        /// to the current instance.
-        /// </summary>
-        /// <param name="claimType">The claim type required, which no restrictions on claim value.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireClaim(string claimType)
-        {
-            if (claimType == null)
-            {
-                throw new ArgumentNullException(nameof(claimType));
-            }
-
-            Requirements.Add(new ClaimsAuthorizationRequirement(claimType, allowedValues: null));
-            return this;
-        }
-
-        /// <summary>
-        /// Adds a <see cref="RolesAuthorizationRequirement"/>
-        /// to the current instance.
-        /// </summary>
-        /// <param name="roles">The allowed roles.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireRole(params string[] roles)
-        {
-            if (roles == null)
-            {
-                throw new ArgumentNullException(nameof(roles));
-            }
-
-            return RequireRole((IEnumerable<string>)roles);
-        }
-
-        /// <summary>
-        /// Adds a <see cref="RolesAuthorizationRequirement"/>
-        /// to the current instance.
-        /// </summary>
-        /// <param name="roles">The allowed roles.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireRole(IEnumerable<string> roles)
-        {
-            if (roles == null)
-            {
-                throw new ArgumentNullException(nameof(roles));
-            }
-
-            Requirements.Add(new RolesAuthorizationRequirement(roles));
-            return this;
-        }
-
-        /// <summary>
-        /// Adds a <see cref="NameAuthorizationRequirement"/>
-        /// to the current instance.
-        /// </summary>
-        /// <param name="userName">The user name the current user must possess.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireUserName(string userName)
-        {
-            if (userName == null)
-            {
-                throw new ArgumentNullException(nameof(userName));
-            }
-
-            Requirements.Add(new NameAuthorizationRequirement(userName));
-            return this;
-        }
-
-        /// <summary>
-        /// Adds a <see cref="DenyAnonymousAuthorizationRequirement"/> to the current instance.
-        /// </summary>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireAuthenticatedUser()
-        {
-            Requirements.Add(new DenyAnonymousAuthorizationRequirement());
-            return this;
-        }
-
-        /// <summary>
-        /// Adds an <see cref="AssertionRequirement"/> to the current instance.
-        /// </summary>
-        /// <param name="handler">The handler to evaluate during authorization.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireAssertion(Func<AuthorizationHandlerContext, bool> handler)
-        {
-            if (handler == null)
-            {
-                throw new ArgumentNullException(nameof(handler));
-            }
-
-            Requirements.Add(new AssertionRequirement(handler));
-            return this;
-        }
-
-        /// <summary>
-        /// Adds an <see cref="AssertionRequirement"/> to the current instance.
-        /// </summary>
-        /// <param name="handler">The handler to evaluate during authorization.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public AuthorizationPolicyBuilder RequireAssertion(Func<AuthorizationHandlerContext, Task<bool>> handler)
-        {
-            if (handler == null)
-            {
-                throw new ArgumentNullException(nameof(handler));
-            }
-
-            Requirements.Add(new AssertionRequirement(handler));
-            return this;
-        }
-
-        /// <summary>
-        /// Builds a new <see cref="AuthorizationPolicy"/> from the requirements 
-        /// in this instance.
-        /// </summary>
-        /// <returns>
-        /// A new <see cref="AuthorizationPolicy"/> built from the requirements in this instance.
-        /// </returns>
-        public AuthorizationPolicy Build()
-        {
-            return new AuthorizationPolicy(Requirements, AuthenticationSchemes.Distinct());
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationResult.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationResult.cs
deleted file mode 100644
index 46dca35fb..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationResult.cs
+++ /dev/null
@@ -1,37 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Security.Claims;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Encapsulates the result of <see cref="IAuthorizationService.AuthorizeAsync(ClaimsPrincipal, object, IEnumerable{IAuthorizationRequirement})"/>.
-    /// </summary>
-    public class AuthorizationResult
-    {
-        private AuthorizationResult() { }
-
-        /// <summary>
-        /// True if authorization was successful.
-        /// </summary>
-        public bool Succeeded { get; private set; }
-
-        /// <summary>
-        /// Contains information about why authorization failed.
-        /// </summary>
-        public AuthorizationFailure Failure { get; private set; }
-
-        /// <summary>
-        /// Returns a successful result.
-        /// </summary>
-        /// <returns>A successful result.</returns>
-        public static AuthorizationResult Success() => new AuthorizationResult { Succeeded = true };
-
-        public static AuthorizationResult Failed(AuthorizationFailure failure) => new AuthorizationResult { Failure = failure };
-
-        public static AuthorizationResult Failed() => new AuthorizationResult { Failure = AuthorizationFailure.ExplicitFail() };
-
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationServiceCollectionExtensions.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationServiceCollectionExtensions.cs
deleted file mode 100644
index c089fba28..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationServiceCollectionExtensions.cs
+++ /dev/null
@@ -1,59 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authorization;
-using Microsoft.AspNetCore.Authorization.Infrastructure;
-using Microsoft.Extensions.DependencyInjection.Extensions;
-
-namespace Microsoft.Extensions.DependencyInjection
-{
-    /// <summary>
-    /// Extension methods for setting up authorization services in an <see cref="IServiceCollection" />.
-    /// </summary>
-    public static class AuthorizationServiceCollectionExtensions
-    {
-        /// <summary>
-        /// Adds authorization services to the specified <see cref="IServiceCollection" />. 
-        /// </summary>
-        /// <param name="services">The <see cref="IServiceCollection" /> to add services to.</param>
-        /// <returns>The <see cref="IServiceCollection"/> so that additional calls can be chained.</returns>
-        public static IServiceCollection AddAuthorization(this IServiceCollection services)
-        {
-            if (services == null)
-            {
-                throw new ArgumentNullException(nameof(services));
-            }
-            
-            services.TryAdd(ServiceDescriptor.Transient<IAuthorizationService, DefaultAuthorizationService>());
-            services.TryAdd(ServiceDescriptor.Transient<IAuthorizationPolicyProvider, DefaultAuthorizationPolicyProvider>());
-            services.TryAdd(ServiceDescriptor.Transient<IAuthorizationHandlerProvider, DefaultAuthorizationHandlerProvider>());
-            services.TryAdd(ServiceDescriptor.Transient<IAuthorizationEvaluator, DefaultAuthorizationEvaluator>());
-            services.TryAdd(ServiceDescriptor.Transient<IAuthorizationHandlerContextFactory, DefaultAuthorizationHandlerContextFactory>());
-            services.TryAddEnumerable(ServiceDescriptor.Transient<IAuthorizationHandler, PassThroughAuthorizationHandler>());
-            return services;
-        }
-
-        /// <summary>
-        /// Adds authorization services to the specified <see cref="IServiceCollection" />. 
-        /// </summary>
-        /// <param name="services">The <see cref="IServiceCollection" /> to add services to.</param>
-        /// <param name="configure">An action delegate to configure the provided <see cref="AuthorizationOptions"/>.</param>
-        /// <returns>The <see cref="IServiceCollection"/> so that additional calls can be chained.</returns>
-        public static IServiceCollection AddAuthorization(this IServiceCollection services, Action<AuthorizationOptions> configure)
-        {
-            if (services == null)
-            {
-                throw new ArgumentNullException(nameof(services));
-            }
-
-            if (configure == null)
-            {
-                throw new ArgumentNullException(nameof(configure));
-            }
-
-            services.Configure(configure);
-            return services.AddAuthorization();
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizationServiceExtensions.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizationServiceExtensions.cs
deleted file mode 100644
index 866b5dbc5..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizationServiceExtensions.cs
+++ /dev/null
@@ -1,118 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using System.Security.Claims;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Extension methods for <see cref="IAuthorizationService"/>.
-    /// </summary>
-    public static class AuthorizationServiceExtensions
-    {
-        /// <summary>
-        /// Checks if a user meets a specific requirement for the specified resource
-        /// </summary>
-        /// <param name="service">The <see cref="IAuthorizationService"/> providing authorization.</param>
-        /// <param name="user">The user to evaluate the policy against.</param>
-        /// <param name="resource">The resource to evaluate the policy against.</param>
-        /// <param name="requirement">The requirement to evaluate the policy against.</param>
-        /// <returns>
-        /// A flag indicating whether requirement evaluation has succeeded or failed.
-        /// This value is <value>true</value> when the user fulfills the policy, otherwise <value>false</value>.
-        /// </returns>
-        public static Task<AuthorizationResult> AuthorizeAsync(this IAuthorizationService service, ClaimsPrincipal user, object resource, IAuthorizationRequirement requirement)
-        {
-            if (service == null)
-            {
-                throw new ArgumentNullException(nameof(service));
-            }
-
-            if (requirement == null)
-            {
-                throw new ArgumentNullException(nameof(requirement));
-            }
-
-            return service.AuthorizeAsync(user, resource, new IAuthorizationRequirement[] { requirement });
-        }
-
-        /// <summary>
-        /// Checks if a user meets a specific authorization policy against the specified resource.
-        /// </summary>
-        /// <param name="service">The <see cref="IAuthorizationService"/> providing authorization.</param>
-        /// <param name="user">The user to evaluate the policy against.</param>
-        /// <param name="resource">The resource to evaluate the policy against.</param>
-        /// <param name="policy">The policy to evaluate.</param>
-        /// <returns>
-        /// A flag indicating whether policy evaluation has succeeded or failed.
-        /// This value is <value>true</value> when the user fulfills the policy, otherwise <value>false</value>.
-        /// </returns>
-        public static Task<AuthorizationResult> AuthorizeAsync(this IAuthorizationService service, ClaimsPrincipal user, object resource, AuthorizationPolicy policy)
-        {
-            if (service == null)
-            {
-                throw new ArgumentNullException(nameof(service));
-            }
-
-            if (policy == null)
-            {
-                throw new ArgumentNullException(nameof(policy));
-            }
-
-            return service.AuthorizeAsync(user, resource, policy.Requirements);
-        }
-
-        /// <summary>
-        /// Checks if a user meets a specific authorization policy against the specified resource.
-        /// </summary>
-        /// <param name="service">The <see cref="IAuthorizationService"/> providing authorization.</param>
-        /// <param name="user">The user to evaluate the policy against.</param>
-        /// <param name="policy">The policy to evaluate.</param>
-        /// <returns>
-        /// A flag indicating whether policy evaluation has succeeded or failed.
-        /// This value is <value>true</value> when the user fulfills the policy, otherwise <value>false</value>.
-        /// </returns>
-        public static Task<AuthorizationResult> AuthorizeAsync(this IAuthorizationService service, ClaimsPrincipal user, AuthorizationPolicy policy)
-        {
-            if (service == null)
-            {
-                throw new ArgumentNullException(nameof(service));
-            }
-
-            if (policy == null)
-            {
-                throw new ArgumentNullException(nameof(policy));
-            }
-
-            return service.AuthorizeAsync(user, resource: null, policy: policy);
-        }
-
-        /// <summary>
-        /// Checks if a user meets a specific authorization policy against the specified resource.
-        /// </summary>
-        /// <param name="service">The <see cref="IAuthorizationService"/> providing authorization.</param>
-        /// <param name="user">The user to evaluate the policy against.</param>
-        /// <param name="policyName">The name of the policy to evaluate.</param>
-        /// <returns>
-        /// A flag indicating whether policy evaluation has succeeded or failed.
-        /// This value is <value>true</value> when the user fulfills the policy, otherwise <value>false</value>.
-        /// </returns>
-        public static Task<AuthorizationResult> AuthorizeAsync(this IAuthorizationService service, ClaimsPrincipal user, string policyName)
-        {
-            if (service == null)
-            {
-                throw new ArgumentNullException(nameof(service));
-            }
-
-            if (policyName == null)
-            {
-                throw new ArgumentNullException(nameof(policyName));
-            }
-
-            return service.AuthorizeAsync(user, resource: null, policyName: policyName);
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/AuthorizeAttribute.cs b/src/Microsoft.AspNetCore.Authorization/AuthorizeAttribute.cs
deleted file mode 100644
index b1f0f8bae..000000000
--- a/src/Microsoft.AspNetCore.Authorization/AuthorizeAttribute.cs
+++ /dev/null
@@ -1,43 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Specifies that the class or method that this attribute is applied to requires the specified authorization.
-    /// </summary>
-    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = true, Inherited = true)]
-    public class AuthorizeAttribute : Attribute, IAuthorizeData
-    {
-        /// <summary>
-        /// Initializes a new instance of the <see cref="AuthorizeAttribute"/> class. 
-        /// </summary>
-        public AuthorizeAttribute() { }
-
-        /// <summary>
-        /// Initializes a new instance of the <see cref="AuthorizeAttribute"/> class with the specified policy. 
-        /// </summary>
-        /// <param name="policy">The name of the policy to require for authorization.</param>
-        public AuthorizeAttribute(string policy)
-        {
-            Policy = policy;
-        }
-
-        /// <summary>
-        /// Gets or sets the policy name that determines access to the resource.
-        /// </summary>
-        public string Policy { get; set; }
-
-        /// <summary>
-        /// Gets or sets a comma delimited list of roles that are allowed to access the resource.
-        /// </summary>
-        public string Roles { get; set; }
-
-        /// <summary>
-        /// Gets or sets a comma delimited list of schemes from which user information is constructed.
-        /// </summary>
-        public string AuthenticationSchemes { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationEvaluator.cs b/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationEvaluator.cs
deleted file mode 100644
index 4bbc283be..000000000
--- a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationEvaluator.cs
+++ /dev/null
@@ -1,23 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Determines whether an authorization request was successful or not.
-    /// </summary>
-    public class DefaultAuthorizationEvaluator : IAuthorizationEvaluator
-    {
-        /// <summary>
-        /// Determines whether the authorization result was successful or not.
-        /// </summary>
-        /// <param name="context">The authorization information.</param>
-        /// <returns>The <see cref="AuthorizationResult"/>.</returns>
-        public AuthorizationResult Evaluate(AuthorizationHandlerContext context)
-            => context.HasSucceeded
-                ? AuthorizationResult.Success()
-                : AuthorizationResult.Failed(context.HasFailed
-                    ? AuthorizationFailure.ExplicitFail()
-                    : AuthorizationFailure.Failed(context.PendingRequirements));
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationHandlerContextFactory.cs b/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationHandlerContextFactory.cs
deleted file mode 100644
index 2dae5e5e7..000000000
--- a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationHandlerContextFactory.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Security.Claims;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// A type used to provide a <see cref="AuthorizationHandlerContext"/> used for authorization.
-    /// </summary>
-    public class DefaultAuthorizationHandlerContextFactory : IAuthorizationHandlerContextFactory
-    {
-        /// <summary>
-        /// Creates a <see cref="AuthorizationHandlerContext"/> used for authorization.
-        /// </summary>
-        /// <param name="requirements">The requirements to evaluate.</param>
-        /// <param name="user">The user to evaluate the requirements against.</param>
-        /// <param name="resource">
-        /// An optional resource the policy should be checked with.
-        /// If a resource is not required for policy evaluation you may pass null as the value.
-        /// </param>
-        /// <returns>The <see cref="AuthorizationHandlerContext"/>.</returns>
-        public virtual AuthorizationHandlerContext CreateContext(IEnumerable<IAuthorizationRequirement> requirements, ClaimsPrincipal user, object resource)
-        {
-            return new AuthorizationHandlerContext(requirements, user, resource);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationHandlerProvider.cs b/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationHandlerProvider.cs
deleted file mode 100644
index d297d4cdc..000000000
--- a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationHandlerProvider.cs
+++ /dev/null
@@ -1,35 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// The default implementation of a handler provider,
-    /// which provides the <see cref="IAuthorizationHandler"/>s for an authorization request.
-    /// </summary>
-    public class DefaultAuthorizationHandlerProvider : IAuthorizationHandlerProvider
-    {
-        private readonly IEnumerable<IAuthorizationHandler> _handlers;
-
-        /// <summary>
-        /// Creates a new instance of <see cref="DefaultAuthorizationHandlerProvider"/>.
-        /// </summary>
-        /// <param name="handlers">The <see cref="IAuthorizationHandler"/>s.</param>
-        public DefaultAuthorizationHandlerProvider(IEnumerable<IAuthorizationHandler> handlers)
-        {
-            if (handlers == null)
-            {
-                throw new ArgumentNullException(nameof(handlers));
-            }
-
-            _handlers = handlers;
-        }
-
-        public Task<IEnumerable<IAuthorizationHandler>> GetHandlersAsync(AuthorizationHandlerContext context)
-            => Task.FromResult(_handlers);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationPolicyProvider.cs b/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationPolicyProvider.cs
deleted file mode 100644
index f5e665273..000000000
--- a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationPolicyProvider.cs
+++ /dev/null
@@ -1,75 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// The default implementation of a policy provider,
-    /// which provides a <see cref="AuthorizationPolicy"/> for a particular name.
-    /// </summary>
-    public class DefaultAuthorizationPolicyProvider : IAuthorizationPolicyProvider
-    {
-        private readonly AuthorizationOptions _options;
-        private Task<AuthorizationPolicy> _cachedDefaultPolicy;
-        private Task<AuthorizationPolicy> _cachedRequiredPolicy;
-
-        /// <summary>
-        /// Creates a new instance of <see cref="DefaultAuthorizationPolicyProvider"/>.
-        /// </summary>
-        /// <param name="options">The options used to configure this instance.</param>
-        public DefaultAuthorizationPolicyProvider(IOptions<AuthorizationOptions> options)
-        {
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            _options = options.Value;
-        }
-
-        /// <summary>
-        /// Gets the default authorization policy.
-        /// </summary>
-        /// <returns>The default authorization policy.</returns>
-        public Task<AuthorizationPolicy> GetDefaultPolicyAsync()
-        {
-            return GetCachedPolicy(ref _cachedDefaultPolicy, _options.DefaultPolicy);
-        }
-
-        /// <summary>
-        /// Gets the required authorization policy.
-        /// </summary>
-        /// <returns>The required authorization policy.</returns>
-        public Task<AuthorizationPolicy> GetRequiredPolicyAsync()
-        {
-            return GetCachedPolicy(ref _cachedRequiredPolicy, _options.RequiredPolicy);
-        }
-
-        private Task<AuthorizationPolicy> GetCachedPolicy(ref Task<AuthorizationPolicy> cachedPolicy, AuthorizationPolicy currentPolicy)
-        {
-            var local = cachedPolicy;
-            if (local == null || local.Result != currentPolicy)
-            {
-                cachedPolicy = local = Task.FromResult(currentPolicy);
-            }
-            return local;
-        }
-
-        /// <summary>
-        /// Gets a <see cref="AuthorizationPolicy"/> from the given <paramref name="policyName"/>
-        /// </summary>
-        /// <param name="policyName">The policy name to retrieve.</param>
-        /// <returns>The named <see cref="AuthorizationPolicy"/>.</returns>
-        public virtual Task<AuthorizationPolicy> GetPolicyAsync(string policyName)
-        {
-            // MVC caches policies specifically for this class, so this method MUST return the same policy per
-            // policyName for every request or it could allow undesired access. It also must return synchronously.
-            // A change to either of these behaviors would require shipping a patch of MVC as well.
-            return Task.FromResult(_options.GetPolicy(policyName));
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationService.cs b/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationService.cs
deleted file mode 100644
index bc5d571c4..000000000
--- a/src/Microsoft.AspNetCore.Authorization/DefaultAuthorizationService.cs
+++ /dev/null
@@ -1,135 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Security.Claims;
-using System.Security.Principal;
-using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// The default implementation of an <see cref="IAuthorizationService"/>.
-    /// </summary>
-    public class DefaultAuthorizationService : IAuthorizationService
-    {
-        private readonly AuthorizationOptions _options;
-        private readonly IAuthorizationHandlerContextFactory _contextFactory;
-        private readonly IAuthorizationHandlerProvider _handlers;
-        private readonly IAuthorizationEvaluator _evaluator;
-        private readonly IAuthorizationPolicyProvider _policyProvider;
-        private readonly ILogger _logger;
-
-        /// <summary>
-        /// Creates a new instance of <see cref="DefaultAuthorizationService"/>.
-        /// </summary>
-        /// <param name="policyProvider">The <see cref="IAuthorizationPolicyProvider"/> used to provide policies.</param>
-        /// <param name="handlers">The handlers used to fulfill <see cref="IAuthorizationRequirement"/>s.</param>
-        /// <param name="logger">The logger used to log messages, warnings and errors.</param>  
-        /// <param name="contextFactory">The <see cref="IAuthorizationHandlerContextFactory"/> used to create the context to handle the authorization.</param>  
-        /// <param name="evaluator">The <see cref="IAuthorizationEvaluator"/> used to determine if authorization was successful.</param>  
-        /// <param name="options">The <see cref="AuthorizationOptions"/> used.</param>  
-        public DefaultAuthorizationService(IAuthorizationPolicyProvider policyProvider, IAuthorizationHandlerProvider handlers, ILogger<DefaultAuthorizationService> logger, IAuthorizationHandlerContextFactory contextFactory, IAuthorizationEvaluator evaluator, IOptions<AuthorizationOptions> options)
-        {
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-            if (policyProvider == null)
-            {
-                throw new ArgumentNullException(nameof(policyProvider));
-            }
-            if (handlers == null)
-            {
-                throw new ArgumentNullException(nameof(handlers));
-            }
-            if (logger == null)
-            {
-                throw new ArgumentNullException(nameof(logger));
-            }
-            if (contextFactory == null)
-            {
-                throw new ArgumentNullException(nameof(contextFactory));
-            }
-            if (evaluator == null)
-            {
-                throw new ArgumentNullException(nameof(evaluator));
-            }
-
-            _options = options.Value;
-            _handlers = handlers;
-            _policyProvider = policyProvider;
-            _logger = logger;
-            _evaluator = evaluator;
-            _contextFactory = contextFactory;
-        }
-
-        /// <summary>
-        /// Checks if a user meets a specific set of requirements for the specified resource.
-        /// </summary>
-        /// <param name="user">The user to evaluate the requirements against.</param>
-        /// <param name="resource">The resource to evaluate the requirements against.</param>
-        /// <param name="requirements">The requirements to evaluate.</param>
-        /// <returns>
-        /// A flag indicating whether authorization has succeeded.
-        /// This value is <value>true</value> when the user fulfills the policy otherwise <value>false</value>.
-        /// </returns>
-        public async Task<AuthorizationResult> AuthorizeAsync(ClaimsPrincipal user, object resource, IEnumerable<IAuthorizationRequirement> requirements)
-        {
-            if (requirements == null)
-            {
-                throw new ArgumentNullException(nameof(requirements));
-            }
-
-            var authContext = _contextFactory.CreateContext(requirements, user, resource);
-            var handlers = await _handlers.GetHandlersAsync(authContext);
-            foreach (var handler in handlers)
-            {
-                await handler.HandleAsync(authContext);
-                if (!_options.InvokeHandlersAfterFailure && authContext.HasFailed)
-                {
-                    break;
-                }
-            }
-
-            var result = _evaluator.Evaluate(authContext);
-            if (result.Succeeded)
-            {
-                _logger.UserAuthorizationSucceeded();
-            }
-            else
-            {
-                _logger.UserAuthorizationFailed();
-            }
-            return result;
-        }
-
-        /// <summary>
-        /// Checks if a user meets a specific authorization policy.
-        /// </summary>
-        /// <param name="user">The user to check the policy against.</param>
-        /// <param name="resource">The resource the policy should be checked with.</param>
-        /// <param name="policyName">The name of the policy to check against a specific context.</param>
-        /// <returns>
-        /// A flag indicating whether authorization has succeeded.
-        /// This value is <value>true</value> when the user fulfills the policy otherwise <value>false</value>.
-        /// </returns>
-        public async Task<AuthorizationResult> AuthorizeAsync(ClaimsPrincipal user, object resource, string policyName)
-        {
-            if (policyName == null)
-            {
-                throw new ArgumentNullException(nameof(policyName));
-            }
-
-            var policy = await _policyProvider.GetPolicyAsync(policyName);
-            if (policy == null)
-            {
-                throw new InvalidOperationException($"No policy found: {policyName}.");
-            }
-            return await this.AuthorizeAsync(user, resource, policy);
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/IAllowAnonymous.cs b/src/Microsoft.AspNetCore.Authorization/IAllowAnonymous.cs
deleted file mode 100644
index 8531c3daa..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAllowAnonymous.cs
+++ /dev/null
@@ -1,12 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Marker interface to enable the <see cref="AllowAnonymousAttribute"/>.
-    /// </summary>
-    public interface IAllowAnonymous
-    {
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/IAuthorizationEvaluator.cs b/src/Microsoft.AspNetCore.Authorization/IAuthorizationEvaluator.cs
deleted file mode 100644
index baa6f828c..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAuthorizationEvaluator.cs
+++ /dev/null
@@ -1,18 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Determines whether an authorization request was successful or not.
-    /// </summary>
-    public interface IAuthorizationEvaluator
-    {
-        /// <summary>
-        /// Determines whether the authorization result was successful or not.
-        /// </summary>
-        /// <param name="context">The authorization information.</param>
-        /// <returns>The <see cref="AuthorizationResult"/>.</returns>
-        AuthorizationResult Evaluate(AuthorizationHandlerContext context);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandler.cs b/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandler.cs
deleted file mode 100644
index afe9e43f0..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandler.cs
+++ /dev/null
@@ -1,19 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Classes implementing this interface are able to make a decision if authorization is allowed.
-    /// </summary>
-    public interface IAuthorizationHandler
-    {
-        /// <summary>
-        /// Makes a decision if authorization is allowed.
-        /// </summary>
-        /// <param name="context">The authorization information.</param>
-        Task HandleAsync(AuthorizationHandlerContext context);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandlerContextFactory.cs b/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandlerContextFactory.cs
deleted file mode 100644
index 272109eea..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandlerContextFactory.cs
+++ /dev/null
@@ -1,26 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Security.Claims;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// A type used to provide a <see cref="AuthorizationHandlerContext"/> used for authorization.
-    /// </summary>
-    public interface IAuthorizationHandlerContextFactory
-    {
-        /// <summary>
-        /// Creates a <see cref="AuthorizationHandlerContext"/> used for authorization.
-        /// </summary>
-        /// <param name="requirements">The requirements to evaluate.</param>
-        /// <param name="user">The user to evaluate the requirements against.</param>
-        /// <param name="resource">
-        /// An optional resource the policy should be checked with.
-        /// If a resource is not required for policy evaluation you may pass null as the value.
-        /// </param>
-        /// <returns>The <see cref="AuthorizationHandlerContext"/>.</returns>
-        AuthorizationHandlerContext CreateContext(IEnumerable<IAuthorizationRequirement> requirements, ClaimsPrincipal user, object resource);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandlerProvider.cs b/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandlerProvider.cs
deleted file mode 100644
index 7f0d9f5d3..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAuthorizationHandlerProvider.cs
+++ /dev/null
@@ -1,21 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// A type which can provide the <see cref="IAuthorizationHandler"/>s for an authorization request.
-    /// </summary>
-    public interface IAuthorizationHandlerProvider
-    {
-        /// <summary>
-        /// Return the handlers that will be called for the authorization request.
-        /// </summary>
-        /// <param name="context">The <see cref="AuthorizationHandlerContext"/>.</param>
-        /// <returns>The list of handlers.</returns>
-        Task<IEnumerable<IAuthorizationHandler>> GetHandlersAsync(AuthorizationHandlerContext context);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/IAuthorizationPolicyProvider.cs b/src/Microsoft.AspNetCore.Authorization/IAuthorizationPolicyProvider.cs
deleted file mode 100644
index 4560d11e0..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAuthorizationPolicyProvider.cs
+++ /dev/null
@@ -1,32 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// A type which can provide a <see cref="AuthorizationPolicy"/> for a particular name.
-    /// </summary>
-    public interface IAuthorizationPolicyProvider
-    {
-        /// <summary>
-        /// Gets a <see cref="AuthorizationPolicy"/> from the given <paramref name="policyName"/>
-        /// </summary>
-        /// <param name="policyName">The policy name to retrieve.</param>
-        /// <returns>The named <see cref="AuthorizationPolicy"/>.</returns>
-        Task<AuthorizationPolicy> GetPolicyAsync(string policyName);
-
-        /// <summary>
-        /// Gets the default authorization policy.
-        /// </summary>
-        /// <returns>The default authorization policy.</returns>
-        Task<AuthorizationPolicy> GetDefaultPolicyAsync();
-
-        /// <summary>
-        /// Gets the required authorization policy.
-        /// </summary>
-        /// <returns>The required authorization policy.</returns>
-        Task<AuthorizationPolicy> GetRequiredPolicyAsync();
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/IAuthorizationRequirement.cs b/src/Microsoft.AspNetCore.Authorization/IAuthorizationRequirement.cs
deleted file mode 100644
index 0bdcaff86..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAuthorizationRequirement.cs
+++ /dev/null
@@ -1,12 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Represents an authorization requirement.
-    /// </summary>
-    public interface IAuthorizationRequirement
-    {
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/IAuthorizationService.cs b/src/Microsoft.AspNetCore.Authorization/IAuthorizationService.cs
deleted file mode 100644
index 8976425ba..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAuthorizationService.cs
+++ /dev/null
@@ -1,54 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Security.Claims;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Checks policy based permissions for a user
-    /// </summary>
-    public interface IAuthorizationService
-    {
-        /// <summary>
-        /// Checks if a user meets a specific set of requirements for the specified resource
-        /// </summary>
-        /// <param name="user">The user to evaluate the requirements against.</param>
-        /// <param name="resource">
-        /// An optional resource the policy should be checked with.
-        /// If a resource is not required for policy evaluation you may pass null as the value.
-        /// </param>
-        /// <param name="requirements">The requirements to evaluate.</param>
-        /// <returns>
-        /// A flag indicating whether authorization has succeeded.
-        /// This value is <value>true</value> when the user fulfills the policy; otherwise <value>false</value>.
-        /// </returns>
-        /// <remarks>
-        /// Resource is an optional parameter and may be null. Please ensure that you check it is not 
-        /// null before acting upon it.
-        /// </remarks>
-        Task<AuthorizationResult> AuthorizeAsync(ClaimsPrincipal user, object resource, IEnumerable<IAuthorizationRequirement> requirements);
-
-        /// <summary>
-        /// Checks if a user meets a specific authorization policy
-        /// </summary>
-        /// <param name="user">The user to check the policy against.</param>
-        /// <param name="resource">
-        /// An optional resource the policy should be checked with.
-        /// If a resource is not required for policy evaluation you may pass null as the value.
-        /// </param>
-        /// <param name="policyName">The name of the policy to check against a specific context.</param>
-        /// <returns>
-        /// A flag indicating whether authorization has succeeded.
-        /// Returns a flag indicating whether the user, and optional resource has fulfilled the policy.    
-        /// <value>true</value> when the policy has been fulfilled; otherwise <value>false</value>.
-        /// </returns>
-        /// <remarks>
-        /// Resource is an optional parameter and may be null. Please ensure that you check it is not 
-        /// null before acting upon it.
-        /// </remarks>
-        Task<AuthorizationResult> AuthorizeAsync(ClaimsPrincipal user, object resource, string policyName);
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/IAuthorizeData.cs b/src/Microsoft.AspNetCore.Authorization/IAuthorizeData.cs
deleted file mode 100644
index 1196db82d..000000000
--- a/src/Microsoft.AspNetCore.Authorization/IAuthorizeData.cs
+++ /dev/null
@@ -1,26 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authorization
-{
-    /// <summary>
-    /// Defines the set of data required to apply authorization rules to a resource.
-    /// </summary>
-    public interface IAuthorizeData
-    {
-        /// <summary>
-        /// Gets or sets the policy name that determines access to the resource.
-        /// </summary>
-        string Policy { get; set; }
-
-        /// <summary>
-        /// Gets or sets a comma delimited list of roles that are allowed to access the resource.
-        /// </summary>
-        string Roles { get; set; }
-
-        /// <summary>
-        /// Gets or sets a comma delimited list of schemes from which user information is constructed.
-        /// </summary>
-        string AuthenticationSchemes { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Infrastructure/AssertionRequirement.cs b/src/Microsoft.AspNetCore.Authorization/Infrastructure/AssertionRequirement.cs
deleted file mode 100644
index 5fa452b73..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Infrastructure/AssertionRequirement.cs
+++ /dev/null
@@ -1,60 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization.Infrastructure
-{
-    /// <summary>
-    /// Implements an <see cref="IAuthorizationHandler"/> and <see cref="IAuthorizationRequirement"/>
-    /// that takes a user specified assertion.
-    /// </summary>
-    public class AssertionRequirement : IAuthorizationHandler, IAuthorizationRequirement
-    {
-        /// <summary>
-        /// Function that is called to handle this requirement.
-        /// </summary>
-        public Func<AuthorizationHandlerContext, Task<bool>> Handler { get; }
-
-        /// <summary>
-        /// Creates a new instance of <see cref="AssertionRequirement"/>.
-        /// </summary>
-        /// <param name="handler">Function that is called to handle this requirement.</param>
-        public AssertionRequirement(Func<AuthorizationHandlerContext, bool> handler)
-        {
-            if (handler == null)
-            {
-                throw new ArgumentNullException(nameof(handler));
-            }
-
-            Handler = context => Task.FromResult(handler(context));
-        }
-
-        /// <summary>
-        /// Creates a new instance of <see cref="AssertionRequirement"/>.
-        /// </summary>
-        /// <param name="handler">Function that is called to handle this requirement.</param>
-        public AssertionRequirement(Func<AuthorizationHandlerContext, Task<bool>> handler)
-        {
-            if (handler == null)
-            {
-                throw new ArgumentNullException(nameof(handler));
-            }
-
-            Handler = handler;
-        }
-
-        /// <summary>
-        /// Calls <see cref="AssertionRequirement.Handler"/> to see if authorization is allowed.
-        /// </summary>
-        /// <param name="context">The authorization information.</param>
-        public async Task HandleAsync(AuthorizationHandlerContext context)
-        {
-            if (await Handler(context))
-            {
-                context.Succeed(this);
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Infrastructure/ClaimsAuthorizationRequirement.cs b/src/Microsoft.AspNetCore.Authorization/Infrastructure/ClaimsAuthorizationRequirement.cs
deleted file mode 100644
index 93b1deea6..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Infrastructure/ClaimsAuthorizationRequirement.cs
+++ /dev/null
@@ -1,73 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization.Infrastructure
-{
-    /// <summary>
-    /// Implements an <see cref="IAuthorizationHandler"/> and <see cref="IAuthorizationRequirement"/>
-    /// which requires at least one instance of the specified claim type, and, if allowed values are specified, 
-    /// the claim value must be any of the allowed values.
-    /// </summary>
-    public class ClaimsAuthorizationRequirement : AuthorizationHandler<ClaimsAuthorizationRequirement>, IAuthorizationRequirement
-    {
-        /// <summary>
-        /// Creates a new instance of <see cref="ClaimsAuthorizationRequirement"/>.
-        /// </summary>
-        /// <param name="claimType">The claim type that must be present.</param>
-        /// <param name="allowedValues">The optional list of claim values, which, if present, 
-        /// the claim must match.</param>
-        public ClaimsAuthorizationRequirement(string claimType, IEnumerable<string> allowedValues)
-        {
-            if (claimType == null)
-            {
-                throw new ArgumentNullException(nameof(claimType));
-            }
-
-            ClaimType = claimType;
-            AllowedValues = allowedValues;
-        }
-
-        /// <summary>
-        /// Gets the claim type that must be present.
-        /// </summary>
-        public string ClaimType { get; }
-
-        /// <summary>
-        /// Gets the optional list of claim values, which, if present, 
-        /// the claim must match.
-        /// </summary>
-        public IEnumerable<string> AllowedValues { get; }
-
-        /// <summary>
-        /// Makes a decision if authorization is allowed based on the claims requirements specified.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        /// <param name="requirement">The requirement to evaluate.</param>
-        protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, ClaimsAuthorizationRequirement requirement)
-        {
-            if (context.User != null)
-            {
-                var found = false;
-                if (requirement.AllowedValues == null || !requirement.AllowedValues.Any())
-                {
-                    found = context.User.Claims.Any(c => string.Equals(c.Type, requirement.ClaimType, StringComparison.OrdinalIgnoreCase));
-                }
-                else
-                {
-                    found = context.User.Claims.Any(c => string.Equals(c.Type, requirement.ClaimType, StringComparison.OrdinalIgnoreCase)
-                                                        && requirement.AllowedValues.Contains(c.Value, StringComparer.Ordinal));
-                }
-                if (found)
-                {
-                    context.Succeed(requirement);
-                }
-            }
-            return Task.CompletedTask;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Infrastructure/DenyAnonymousAuthorizationRequirement.cs b/src/Microsoft.AspNetCore.Authorization/Infrastructure/DenyAnonymousAuthorizationRequirement.cs
deleted file mode 100644
index e88cce7aa..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Infrastructure/DenyAnonymousAuthorizationRequirement.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Linq;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization.Infrastructure
-{
-    /// <summary>
-    /// Implements an <see cref="IAuthorizationHandler"/> and <see cref="IAuthorizationRequirement"/>
-    /// which requires the current user must be authenticated.
-    /// </summary>
-    public class DenyAnonymousAuthorizationRequirement : AuthorizationHandler<DenyAnonymousAuthorizationRequirement>, IAuthorizationRequirement
-    {
-        /// <summary>
-        /// Makes a decision if authorization is allowed based on a specific requirement.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        /// <param name="requirement">The requirement to evaluate.</param>
-        protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, DenyAnonymousAuthorizationRequirement requirement)
-        {
-            var user = context.User;
-            var userIsAnonymous =
-                user?.Identity == null ||
-                !user.Identities.Any(i => i.IsAuthenticated);
-            if (!userIsAnonymous)
-            {
-                context.Succeed(requirement);
-            }
-            return Task.CompletedTask;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Infrastructure/NameAuthorizationRequirement.cs b/src/Microsoft.AspNetCore.Authorization/Infrastructure/NameAuthorizationRequirement.cs
deleted file mode 100644
index 02ab946fa..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Infrastructure/NameAuthorizationRequirement.cs
+++ /dev/null
@@ -1,52 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization.Infrastructure
-{
-    /// <summary>
-    /// Implements an <see cref="IAuthorizationHandler"/> and <see cref="IAuthorizationRequirement"/>
-    /// which requires the current user name must match the specified value.
-    /// </summary>
-    public class NameAuthorizationRequirement : AuthorizationHandler<NameAuthorizationRequirement>, IAuthorizationRequirement
-    {
-        /// <summary>
-        /// Constructs a new instance of <see cref="NameAuthorizationRequirement"/>.
-        /// </summary>
-        /// <param name="requiredName">The required name that the current user must have.</param>
-        public NameAuthorizationRequirement(string requiredName)
-        {
-            if (requiredName == null)
-            {
-                throw new ArgumentNullException(nameof(requiredName));
-            }
-
-            RequiredName = requiredName;
-        }
-
-        /// <summary>
-        /// Gets the required name that the current user must have.
-        /// </summary>
-        public string RequiredName { get; }
-
-        /// <summary>
-        /// Makes a decision if authorization is allowed based on a specific requirement.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        /// <param name="requirement">The requirement to evaluate.</param>
-        protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, NameAuthorizationRequirement requirement)
-        {
-            if (context.User != null)
-            {
-                if (context.User.Identities.Any(i => string.Equals(i.Name, requirement.RequiredName)))
-                {
-                    context.Succeed(requirement);
-                }
-            }
-            return Task.CompletedTask;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Infrastructure/OperationAuthorizationRequirement.cs b/src/Microsoft.AspNetCore.Authorization/Infrastructure/OperationAuthorizationRequirement.cs
deleted file mode 100644
index c3f16356d..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Infrastructure/OperationAuthorizationRequirement.cs
+++ /dev/null
@@ -1,17 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.Authorization.Infrastructure
-{
-    /// <summary>
-    /// A helper class to provide a useful <see cref="IAuthorizationRequirement"/> which
-    /// contains a name.
-    /// </summary>
-    public class OperationAuthorizationRequirement : IAuthorizationRequirement
-    {
-        /// <summary>
-        /// The name of this instance of <see cref="IAuthorizationRequirement"/>.
-        /// </summary>
-        public string Name { get; set; }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Infrastructure/PassThroughAuthorizationHandler.cs b/src/Microsoft.AspNetCore.Authorization/Infrastructure/PassThroughAuthorizationHandler.cs
deleted file mode 100644
index 6f0b8293f..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Infrastructure/PassThroughAuthorizationHandler.cs
+++ /dev/null
@@ -1,27 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Linq;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization.Infrastructure
-{
-    /// <summary>
-    /// Infrastructure class which allows an <see cref="IAuthorizationRequirement"/> to
-    /// be its own <see cref="IAuthorizationHandler"/>.
-    /// </summary>
-    public class PassThroughAuthorizationHandler : IAuthorizationHandler
-    {
-        /// <summary>
-        /// Makes a decision if authorization is allowed.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        public async Task HandleAsync(AuthorizationHandlerContext context)
-        {
-            foreach (var handler in context.Requirements.OfType<IAuthorizationHandler>())
-            {
-                await handler.HandleAsync(context);
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Infrastructure/RolesAuthorizationRequirement.cs b/src/Microsoft.AspNetCore.Authorization/Infrastructure/RolesAuthorizationRequirement.cs
deleted file mode 100644
index 811e17aac..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Infrastructure/RolesAuthorizationRequirement.cs
+++ /dev/null
@@ -1,68 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authorization.Infrastructure
-{
-    /// <summary>
-    /// Implements an <see cref="IAuthorizationHandler"/> and <see cref="IAuthorizationRequirement"/>
-    /// which requires at least one role claim whose value must be any of the allowed roles.
-    /// </summary>
-    public class RolesAuthorizationRequirement : AuthorizationHandler<RolesAuthorizationRequirement>, IAuthorizationRequirement
-    {
-        /// <summary>
-        /// Creates a new instance of <see cref="RolesAuthorizationRequirement"/>.
-        /// </summary>
-        /// <param name="allowedRoles">A collection of allowed roles.</param>
-        public RolesAuthorizationRequirement(IEnumerable<string> allowedRoles)
-        {
-            if (allowedRoles == null)
-            {
-                throw new ArgumentNullException(nameof(allowedRoles));
-            }
-
-            if (allowedRoles.Count() == 0)
-            {
-                throw new InvalidOperationException(Resources.Exception_RoleRequirementEmpty);
-            }
-            AllowedRoles = allowedRoles;
-        }
-
-        /// <summary>
-        /// Gets the collection of allowed roles.
-        /// </summary>
-        public IEnumerable<string> AllowedRoles { get; }
-
-        /// <summary>
-        /// Makes a decision if authorization is allowed based on a specific requirement.
-        /// </summary>
-        /// <param name="context">The authorization context.</param>
-        /// <param name="requirement">The requirement to evaluate.</param>
-
-        protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, RolesAuthorizationRequirement requirement)
-        {
-            if (context.User != null)
-            {
-                bool found = false;
-                if (requirement.AllowedRoles == null || !requirement.AllowedRoles.Any())
-                {
-                    // Review: What do we want to do here?  No roles requested is auto success?
-                }
-                else
-                {
-                    found = requirement.AllowedRoles.Any(r => context.User.IsInRole(r));
-                }
-                if (found)
-                {
-                    context.Succeed(requirement);
-                }
-            }
-            return Task.CompletedTask;
-        }
-
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/LoggingExtensions.cs b/src/Microsoft.AspNetCore.Authorization/LoggingExtensions.cs
deleted file mode 100644
index 386df85e0..000000000
--- a/src/Microsoft.AspNetCore.Authorization/LoggingExtensions.cs
+++ /dev/null
@@ -1,31 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.Extensions.Logging
-{
-    internal static class LoggingExtensions
-    {
-        private static Action<ILogger, Exception> _userAuthorizationFailed;
-        private static Action<ILogger, Exception> _userAuthorizationSucceeded;
-
-        static LoggingExtensions()
-        {
-            _userAuthorizationSucceeded = LoggerMessage.Define(
-                eventId: 1,
-                logLevel: LogLevel.Information,
-                formatString: "Authorization was successful.");
-            _userAuthorizationFailed = LoggerMessage.Define(
-                eventId: 2,
-                logLevel: LogLevel.Information,
-                formatString: "Authorization failed.");
-        }
-
-        public static void UserAuthorizationSucceeded(this ILogger logger)
-            => _userAuthorizationSucceeded(logger, null);
-
-        public static void UserAuthorizationFailed(this ILogger logger)
-            => _userAuthorizationFailed(logger, null);
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Microsoft.AspNetCore.Authorization.csproj b/src/Microsoft.AspNetCore.Authorization/Microsoft.AspNetCore.Authorization.csproj
deleted file mode 100644
index 9192ac8cf..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Microsoft.AspNetCore.Authorization.csproj
+++ /dev/null
@@ -1,20 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core authorization classes.
-Commonly used types:
-Microsoft.AspNetCore.Authorization.AllowAnonymousAttribute
-Microsoft.AspNetCore.Authorization.AuthorizeAttribute</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;authorization</PackageTags>
-    <EnableApiCheck>false</EnableApiCheck>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="$(MicrosoftExtensionsLoggingAbstractionsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Options" Version="$(MicrosoftExtensionsOptionsPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.Authorization/Properties/Resources.Designer.cs b/src/Microsoft.AspNetCore.Authorization/Properties/Resources.Designer.cs
deleted file mode 100644
index c83fa9ea5..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Properties/Resources.Designer.cs
+++ /dev/null
@@ -1,72 +0,0 @@
-// <auto-generated />
-namespace Microsoft.AspNetCore.Authorization
-{
-    using System.Globalization;
-    using System.Reflection;
-    using System.Resources;
-
-    internal static class Resources
-    {
-        private static readonly ResourceManager _resourceManager
-            = new ResourceManager("Microsoft.AspNetCore.Authorization.Resources", typeof(Resources).GetTypeInfo().Assembly);
-
-        /// <summary>
-        /// AuthorizationPolicy must have at least one requirement.
-        /// </summary>
-        internal static string Exception_AuthorizationPolicyEmpty
-        {
-            get => GetString("Exception_AuthorizationPolicyEmpty");
-        }
-
-        /// <summary>
-        /// AuthorizationPolicy must have at least one requirement.
-        /// </summary>
-        internal static string FormatException_AuthorizationPolicyEmpty()
-            => GetString("Exception_AuthorizationPolicyEmpty");
-
-        /// <summary>
-        /// The AuthorizationPolicy named: '{0}' was not found.
-        /// </summary>
-        internal static string Exception_AuthorizationPolicyNotFound
-        {
-            get => GetString("Exception_AuthorizationPolicyNotFound");
-        }
-
-        /// <summary>
-        /// The AuthorizationPolicy named: '{0}' was not found.
-        /// </summary>
-        internal static string FormatException_AuthorizationPolicyNotFound(object p0)
-            => string.Format(CultureInfo.CurrentCulture, GetString("Exception_AuthorizationPolicyNotFound"), p0);
-
-        /// <summary>
-        /// At least one role must be specified.
-        /// </summary>
-        internal static string Exception_RoleRequirementEmpty
-        {
-            get => GetString("Exception_RoleRequirementEmpty");
-        }
-
-        /// <summary>
-        /// At least one role must be specified.
-        /// </summary>
-        internal static string FormatException_RoleRequirementEmpty()
-            => GetString("Exception_RoleRequirementEmpty");
-
-        private static string GetString(string name, params string[] formatterNames)
-        {
-            var value = _resourceManager.GetString(name);
-
-            System.Diagnostics.Debug.Assert(value != null);
-
-            if (formatterNames != null)
-            {
-                for (var i = 0; i < formatterNames.Length; i++)
-                {
-                    value = value.Replace("{" + formatterNames[i] + "}", "{" + i + "}");
-                }
-            }
-
-            return value;
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.Authorization/Resources.resx b/src/Microsoft.AspNetCore.Authorization/Resources.resx
deleted file mode 100644
index a36e55d6b..000000000
--- a/src/Microsoft.AspNetCore.Authorization/Resources.resx
+++ /dev/null
@@ -1,129 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<root>
-  <!-- 
-    Microsoft ResX Schema 
-    
-    Version 2.0
-    
-    The primary goals of this format is to allow a simple XML format 
-    that is mostly human readable. The generation and parsing of the 
-    various data types are done through the TypeConverter classes 
-    associated with the data types.
-    
-    Example:
-    
-    ... ado.net/XML headers & schema ...
-    <resheader name="resmimetype">text/microsoft-resx</resheader>
-    <resheader name="version">2.0</resheader>
-    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
-    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
-    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
-    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
-    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
-        <value>[base64 mime encoded serialized .NET Framework object]</value>
-    </data>
-    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
-        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
-        <comment>This is a comment</comment>
-    </data>
-                
-    There are any number of "resheader" rows that contain simple 
-    name/value pairs.
-    
-    Each data row contains a name, and value. The row also contains a 
-    type or mimetype. Type corresponds to a .NET class that support 
-    text/value conversion through the TypeConverter architecture. 
-    Classes that don't support this are serialized and stored with the 
-    mimetype set.
-    
-    The mimetype is used for serialized objects, and tells the 
-    ResXResourceReader how to depersist the object. This is currently not 
-    extensible. For a given mimetype the value must be set accordingly:
-    
-    Note - application/x-microsoft.net.object.binary.base64 is the format 
-    that the ResXResourceWriter will generate, however the reader can 
-    read any of the formats listed below.
-    
-    mimetype: application/x-microsoft.net.object.binary.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
-            : and then encoded with base64 encoding.
-    
-    mimetype: application/x-microsoft.net.object.soap.base64
-    value   : The object must be serialized with 
-            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
-            : and then encoded with base64 encoding.
-
-    mimetype: application/x-microsoft.net.object.bytearray.base64
-    value   : The object must be serialized into a byte array 
-            : using a System.ComponentModel.TypeConverter
-            : and then encoded with base64 encoding.
-    -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="Exception_AuthorizationPolicyEmpty" xml:space="preserve">
-    <value>AuthorizationPolicy must have at least one requirement.</value>
-  </data>
-  <data name="Exception_AuthorizationPolicyNotFound" xml:space="preserve">
-    <value>The AuthorizationPolicy named: '{0}' was not found.</value>
-  </data>
-  <data name="Exception_RoleRequirementEmpty" xml:space="preserve">
-    <value>At least one role must be specified.</value>
-  </data>
-</root>
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.Authorization/baseline.netcore.json b/src/Microsoft.AspNetCore.Authorization/baseline.netcore.json
deleted file mode 100644
index 9910c93f6..000000000
--- a/src/Microsoft.AspNetCore.Authorization/baseline.netcore.json
+++ /dev/null
@@ -1,1947 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.Authorization, Version=2.0.3.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Extensions.DependencyInjection.AuthorizationServiceCollectionExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AddAuthorization",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            }
-          ],
-          "ReturnType": "Microsoft.Extensions.DependencyInjection.IServiceCollection",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddAuthorization",
-          "Parameters": [
-            {
-              "Name": "services",
-              "Type": "Microsoft.Extensions.DependencyInjection.IServiceCollection"
-            },
-            {
-              "Name": "configure",
-              "Type": "System.Action<Microsoft.AspNetCore.Authorization.AuthorizationOptions>"
-            }
-          ],
-          "ReturnType": "Microsoft.Extensions.DependencyInjection.IServiceCollection",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AllowAnonymousAttribute",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "System.Attribute",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAllowAnonymous"
-      ],
-      "Members": [
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationFailure",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_FailCalled",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_FailedRequirements",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ExplicitFail",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationFailure",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Failed",
-          "Parameters": [
-            {
-              "Name": "failed",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationFailure",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationHandler<T0>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "HandleAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRequirementAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            },
-            {
-              "Name": "requirement",
-              "Type": "T0"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Abstract": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TRequirement",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-          ]
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationHandler<T0, T1>",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "HandleAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRequirementAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            },
-            {
-              "Name": "requirement",
-              "Type": "T0"
-            },
-            {
-              "Name": "resource",
-              "Type": "T1"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Abstract": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Protected",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": [
-        {
-          "ParameterName": "TRequirement",
-          "ParameterPosition": 0,
-          "BaseTypeOrInterfaces": [
-            "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-          ]
-        },
-        {
-          "ParameterName": "TResource",
-          "ParameterPosition": 1,
-          "BaseTypeOrInterfaces": []
-        }
-      ]
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Requirements",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_User",
-          "Parameters": [],
-          "ReturnType": "System.Security.Claims.ClaimsPrincipal",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Resource",
-          "Parameters": [],
-          "ReturnType": "System.Object",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_PendingRequirements",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_HasFailed",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_HasSucceeded",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Fail",
-          "Parameters": [],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Succeed",
-          "Parameters": [
-            {
-              "Name": "requirement",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "requirements",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>"
-            },
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_InvokeHandlersAfterFailure",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_InvokeHandlersAfterFailure",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_DefaultPolicy",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_DefaultPolicy",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddPolicy",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddPolicy",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "configurePolicy",
-              "Type": "System.Action<Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "GetPolicy",
-          "Parameters": [
-            {
-              "Name": "name",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Requirements",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IReadOnlyList<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AuthenticationSchemes",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IReadOnlyList<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Combine",
-          "Parameters": [
-            {
-              "Name": "policies",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy[]",
-              "IsParams": true
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Combine",
-          "Parameters": [
-            {
-              "Name": "policies",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.AuthorizationPolicy>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "CombineAsync",
-          "Parameters": [
-            {
-              "Name": "policyProvider",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationPolicyProvider"
-            },
-            {
-              "Name": "authorizeData",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizeData>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationPolicy>",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "requirements",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>"
-            },
-            {
-              "Name": "authenticationSchemes",
-              "Type": "System.Collections.Generic.IEnumerable<System.String>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Requirements",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IList<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Requirements",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Collections.Generic.IList<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AuthenticationSchemes",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IList<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AuthenticationSchemes",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Collections.Generic.IList<System.String>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddAuthenticationSchemes",
-          "Parameters": [
-            {
-              "Name": "schemes",
-              "Type": "System.String[]",
-              "IsParams": true
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AddRequirements",
-          "Parameters": [
-            {
-              "Name": "requirements",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement[]",
-              "IsParams": true
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Combine",
-          "Parameters": [
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireClaim",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "requiredValues",
-              "Type": "System.String[]",
-              "IsParams": true
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireClaim",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "requiredValues",
-              "Type": "System.Collections.Generic.IEnumerable<System.String>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireClaim",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireRole",
-          "Parameters": [
-            {
-              "Name": "roles",
-              "Type": "System.String[]",
-              "IsParams": true
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireRole",
-          "Parameters": [
-            {
-              "Name": "roles",
-              "Type": "System.Collections.Generic.IEnumerable<System.String>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireUserName",
-          "Parameters": [
-            {
-              "Name": "userName",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireAuthenticatedUser",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireAssertion",
-          "Parameters": [
-            {
-              "Name": "handler",
-              "Type": "System.Func<Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext, System.Boolean>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "RequireAssertion",
-          "Parameters": [
-            {
-              "Name": "handler",
-              "Type": "System.Func<Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext, System.Threading.Tasks.Task<System.Boolean>>"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicyBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Build",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "authenticationSchemes",
-              "Type": "System.String[]",
-              "IsParams": true
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationResult",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Succeeded",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Failure",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationFailure",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Success",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Failed",
-          "Parameters": [
-            {
-              "Name": "failure",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationFailure"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Failed",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationResult",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizationServiceExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "service",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationService"
-            },
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            },
-            {
-              "Name": "requirement",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationResult>",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "service",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationService"
-            },
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            },
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationResult>",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "service",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationService"
-            },
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "policy",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationPolicy"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationResult>",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "service",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationService"
-            },
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "policyName",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationResult>",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.AuthorizeAttribute",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "System.Attribute",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizeData"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Policy",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizeData",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Policy",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizeData",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Roles",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizeData",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Roles",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizeData",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AuthenticationSchemes",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizeData",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AuthenticationSchemes",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizeData",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ActiveAuthenticationSchemes",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ActiveAuthenticationSchemes",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "policy",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.DefaultAuthorizationEvaluator",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationEvaluator"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Evaluate",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationResult",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationEvaluator",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.DefaultAuthorizationHandlerContextFactory",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationHandlerContextFactory"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "CreateContext",
-          "Parameters": [
-            {
-              "Name": "requirements",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>"
-            },
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationHandlerContextFactory",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.DefaultAuthorizationHandlerProvider",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationHandlerProvider"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "GetHandlersAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationHandler>>",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationHandlerProvider",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "handlers",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationHandler>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.DefaultAuthorizationPolicyProvider",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationPolicyProvider"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "GetDefaultPolicyAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationPolicy>",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationPolicyProvider",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "GetPolicyAsync",
-          "Parameters": [
-            {
-              "Name": "policyName",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationPolicy>",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationPolicyProvider",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptions<Microsoft.AspNetCore.Authorization.AuthorizationOptions>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.DefaultAuthorizationService",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationService"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            },
-            {
-              "Name": "requirements",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationResult>",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationService",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            },
-            {
-              "Name": "policyName",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationResult>",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationService",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "policyProvider",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationPolicyProvider"
-            },
-            {
-              "Name": "handlers",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationHandlerProvider"
-            },
-            {
-              "Name": "logger",
-              "Type": "Microsoft.Extensions.Logging.ILogger<Microsoft.AspNetCore.Authorization.DefaultAuthorizationService>"
-            },
-            {
-              "Name": "contextFactory",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationHandlerContextFactory"
-            },
-            {
-              "Name": "evaluator",
-              "Type": "Microsoft.AspNetCore.Authorization.IAuthorizationEvaluator"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptions<Microsoft.AspNetCore.Authorization.AuthorizationOptions>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAllowAnonymous",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAuthorizationEvaluator",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Evaluate",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationResult",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAuthorizationHandler",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "HandleAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAuthorizationHandlerContextFactory",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "CreateContext",
-          "Parameters": [
-            {
-              "Name": "requirements",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>"
-            },
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAuthorizationHandlerProvider",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "GetHandlersAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationHandler>>",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAuthorizationPolicyProvider",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "GetPolicyAsync",
-          "Parameters": [
-            {
-              "Name": "policyName",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationPolicy>",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "GetDefaultPolicyAsync",
-          "Parameters": [],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationPolicy>",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAuthorizationService",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            },
-            {
-              "Name": "requirements",
-              "Type": "System.Collections.Generic.IEnumerable<Microsoft.AspNetCore.Authorization.IAuthorizationRequirement>"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationResult>",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AuthorizeAsync",
-          "Parameters": [
-            {
-              "Name": "user",
-              "Type": "System.Security.Claims.ClaimsPrincipal"
-            },
-            {
-              "Name": "resource",
-              "Type": "System.Object"
-            },
-            {
-              "Name": "policyName",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task<Microsoft.AspNetCore.Authorization.AuthorizationResult>",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.IAuthorizeData",
-      "Visibility": "Public",
-      "Kind": "Interface",
-      "Abstract": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Policy",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Policy",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Roles",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Roles",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AuthenticationSchemes",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_AuthenticationSchemes",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Infrastructure.AssertionRequirement",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationHandler",
-        "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Handler",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext, System.Threading.Tasks.Task<System.Boolean>>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "handler",
-              "Type": "System.Func<Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext, System.Boolean>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "handler",
-              "Type": "System.Func<Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext, System.Threading.Tasks.Task<System.Boolean>>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Infrastructure.ClaimsAuthorizationRequirement",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authorization.AuthorizationHandler<Microsoft.AspNetCore.Authorization.Infrastructure.ClaimsAuthorizationRequirement>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ClaimType",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_AllowedValues",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IEnumerable<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRequirementAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            },
-            {
-              "Name": "requirement",
-              "Type": "Microsoft.AspNetCore.Authorization.Infrastructure.ClaimsAuthorizationRequirement"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "claimType",
-              "Type": "System.String"
-            },
-            {
-              "Name": "allowedValues",
-              "Type": "System.Collections.Generic.IEnumerable<System.String>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Infrastructure.DenyAnonymousAuthorizationRequirement",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authorization.AuthorizationHandler<Microsoft.AspNetCore.Authorization.Infrastructure.DenyAnonymousAuthorizationRequirement>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "HandleRequirementAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            },
-            {
-              "Name": "requirement",
-              "Type": "Microsoft.AspNetCore.Authorization.Infrastructure.DenyAnonymousAuthorizationRequirement"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Infrastructure.NameAuthorizationRequirement",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authorization.AuthorizationHandler<Microsoft.AspNetCore.Authorization.Infrastructure.NameAuthorizationRequirement>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_RequiredName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRequirementAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            },
-            {
-              "Name": "requirement",
-              "Type": "Microsoft.AspNetCore.Authorization.Infrastructure.NameAuthorizationRequirement"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "requiredName",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Infrastructure.OperationAuthorizationRequirement",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Name",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Name",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Infrastructure.PassThroughAuthorizationHandler",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationHandler"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "HandleAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.AspNetCore.Authorization.IAuthorizationHandler",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Authorization.Infrastructure.RolesAuthorizationRequirement",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.AspNetCore.Authorization.AuthorizationHandler<Microsoft.AspNetCore.Authorization.Infrastructure.RolesAuthorizationRequirement>",
-      "ImplementedInterfaces": [
-        "Microsoft.AspNetCore.Authorization.IAuthorizationRequirement"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_AllowedRoles",
-          "Parameters": [],
-          "ReturnType": "System.Collections.Generic.IEnumerable<System.String>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "HandleRequirementAsync",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Authorization.AuthorizationHandlerContext"
-            },
-            {
-              "Name": "requirement",
-              "Type": "Microsoft.AspNetCore.Authorization.Infrastructure.RolesAuthorizationRequirement"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Virtual": true,
-          "Override": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "allowedRoles",
-              "Type": "System.Collections.Generic.IEnumerable<System.String>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/AppendCookieContext.cs b/src/Microsoft.AspNetCore.CookiePolicy/AppendCookieContext.cs
deleted file mode 100644
index bbb4899c0..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/AppendCookieContext.cs
+++ /dev/null
@@ -1,26 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.CookiePolicy
-{
-    public class AppendCookieContext
-    {
-        public AppendCookieContext(HttpContext context, CookieOptions options, string name, string value)
-        {
-            Context = context;
-            CookieOptions = options;
-            CookieName = name;
-            CookieValue = value;
-        }
-
-        public HttpContext Context { get; }
-        public CookieOptions CookieOptions { get; }
-        public string CookieName { get; set; }
-        public string CookieValue { get; set; }
-        public bool IsConsentNeeded { get; internal set; }
-        public bool HasConsent { get; internal set; }
-        public bool IssueCookie { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyAppBuilderExtensions.cs b/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyAppBuilderExtensions.cs
deleted file mode 100644
index 1564193b9..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyAppBuilderExtensions.cs
+++ /dev/null
@@ -1,50 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.CookiePolicy;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Extension methods to add cookie policy capabilities to an HTTP application pipeline.
-    /// </summary>
-    public static class CookiePolicyAppBuilderExtensions
-    {
-        /// <summary>
-        /// Adds the <see cref="CookiePolicyMiddleware"/> handler to the specified <see cref="IApplicationBuilder"/>, which enables cookie policy capabilities.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public static IApplicationBuilder UseCookiePolicy(this IApplicationBuilder app)
-        {
-            if (app == null)
-            {
-                throw new ArgumentNullException(nameof(app));
-            }
-
-            return app.UseMiddleware<CookiePolicyMiddleware>();
-        }
-
-        /// <summary>
-        /// Adds the <see cref="CookiePolicyMiddleware"/> handler to the specified <see cref="IApplicationBuilder"/>, which enables cookie policy capabilities.
-        /// </summary>
-        /// <param name="app">The <see cref="IApplicationBuilder"/> to add the handler to.</param>
-        /// <param name="options">A <see cref="CookiePolicyOptions"/> that specifies options for the handler.</param>
-        /// <returns>A reference to this instance after the operation has completed.</returns>
-        public static IApplicationBuilder UseCookiePolicy(this IApplicationBuilder app, CookiePolicyOptions options)
-        {
-            if (app == null)
-            {
-                throw new ArgumentNullException(nameof(app));
-            }
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            return app.UseMiddleware<CookiePolicyMiddleware>(Options.Create(options));
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyMiddleware.cs b/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyMiddleware.cs
deleted file mode 100644
index 1a810b7d5..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyMiddleware.cs
+++ /dev/null
@@ -1,56 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Logging.Abstractions;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.CookiePolicy
-{
-    public class CookiePolicyMiddleware
-    {
-        private readonly RequestDelegate _next;
-        private readonly ILogger _logger;
-
-        public CookiePolicyMiddleware(RequestDelegate next, IOptions<CookiePolicyOptions> options, ILoggerFactory factory)
-        {
-            Options = options.Value;
-            _next = next ?? throw new ArgumentNullException(nameof(next));
-            _logger = factory.CreateLogger<CookiePolicyMiddleware>();
-        }
-
-        public CookiePolicyMiddleware(RequestDelegate next, IOptions<CookiePolicyOptions> options)
-        {
-            Options = options.Value;
-            _next = next;
-            _logger = NullLogger.Instance;
-        }
-
-        public CookiePolicyOptions Options { get; set; }
-
-        public Task Invoke(HttpContext context)
-        {
-            var feature = context.Features.Get<IResponseCookiesFeature>() ?? new ResponseCookiesFeature(context.Features);
-            var wrapper = new ResponseCookiesWrapper(context, Options, feature, _logger);
-            context.Features.Set<IResponseCookiesFeature>(new CookiesWrapperFeature(wrapper));
-            context.Features.Set<ITrackingConsentFeature>(wrapper);
-
-            return _next(context);
-        }
-
-        private class CookiesWrapperFeature : IResponseCookiesFeature
-        {
-            public CookiesWrapperFeature(ResponseCookiesWrapper wrapper)
-            {
-                Cookies = wrapper;
-            }
-
-            public IResponseCookies Cookies { get; }
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyOptions.cs b/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyOptions.cs
deleted file mode 100644
index 32d047297..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/CookiePolicyOptions.cs
+++ /dev/null
@@ -1,52 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.CookiePolicy;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Builder
-{
-    /// <summary>
-    /// Provides programmatic configuration for the <see cref="CookiePolicyMiddleware"/>.
-    /// </summary>
-    public class CookiePolicyOptions
-    {
-        /// <summary>
-        /// Affects the cookie's same site attribute.
-        /// </summary>
-        public SameSiteMode MinimumSameSitePolicy { get; set; } = SameSiteMode.Lax;
-
-        /// <summary>
-        /// Affects whether cookies must be HttpOnly.
-        /// </summary>
-        public HttpOnlyPolicy HttpOnly { get; set; } = HttpOnlyPolicy.None;
-
-        /// <summary>
-        /// Affects whether cookies must be Secure.
-        /// </summary>
-        public CookieSecurePolicy Secure { get; set; } = CookieSecurePolicy.None;
-
-        public CookieBuilder ConsentCookie { get; set; } = new CookieBuilder()
-        {
-            Name = ".AspNet.Consent",
-            Expiration = TimeSpan.FromDays(365),
-            IsEssential = true,
-        };
-
-        /// <summary>
-        /// Checks if consent policies should be evaluated on this request. The default is false.
-        /// </summary>
-        public Func<HttpContext, bool> CheckConsentNeeded { get; set; }
-
-        /// <summary>
-        /// Called when a cookie is appended.
-        /// </summary>
-        public Action<AppendCookieContext> OnAppendCookie { get; set; }
-
-        /// <summary>
-        /// Called when a cookie is deleted.
-        /// </summary>
-        public Action<DeleteCookieContext> OnDeleteCookie { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/DeleteCookieContext.cs b/src/Microsoft.AspNetCore.CookiePolicy/DeleteCookieContext.cs
deleted file mode 100644
index fd79ea8d4..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/DeleteCookieContext.cs
+++ /dev/null
@@ -1,24 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.CookiePolicy
-{
-    public class DeleteCookieContext
-    {
-        public DeleteCookieContext(HttpContext context, CookieOptions options, string name)
-        {
-            Context = context;
-            CookieOptions = options;
-            CookieName = name;
-        }
-
-        public HttpContext Context { get; }
-        public CookieOptions CookieOptions { get; }
-        public string CookieName { get; set; }
-        public bool IsConsentNeeded { get; internal set; }
-        public bool HasConsent { get; internal set; }
-        public bool IssueCookie { get; set; }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/HttpOnlyPolicy.cs b/src/Microsoft.AspNetCore.CookiePolicy/HttpOnlyPolicy.cs
deleted file mode 100644
index 82305f475..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/HttpOnlyPolicy.cs
+++ /dev/null
@@ -1,11 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.AspNetCore.CookiePolicy
-{
-    public enum HttpOnlyPolicy
-    {
-        None,
-        Always
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/LoggingExtensions.cs b/src/Microsoft.AspNetCore.CookiePolicy/LoggingExtensions.cs
deleted file mode 100644
index 21b04facc..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/LoggingExtensions.cs
+++ /dev/null
@@ -1,105 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-
-namespace Microsoft.Extensions.Logging
-{
-    internal static class LoggingExtensions
-    {
-        private static Action<ILogger, bool, Exception> _needsConsent;
-        private static Action<ILogger, bool, Exception> _hasConsent;
-        private static Action<ILogger, Exception> _consentGranted;
-        private static Action<ILogger, Exception> _consentWithdrawn;
-        private static Action<ILogger, string, Exception> _cookieSuppressed;
-        private static Action<ILogger, string, Exception> _deleteCookieSuppressed;
-        private static Action<ILogger, string, Exception> _upgradedToSecure;
-        private static Action<ILogger, string, string, Exception> _upgradedSameSite;
-        private static Action<ILogger, string, Exception> _upgradedToHttpOnly;
-
-        static LoggingExtensions()
-        {
-            _needsConsent = LoggerMessage.Define<bool>(
-                eventId: 1,
-                logLevel: LogLevel.Trace,
-                formatString: "Needs consent: {needsConsent}.");
-            _hasConsent = LoggerMessage.Define<bool>(
-                eventId: 2,
-                logLevel: LogLevel.Trace,
-                formatString: "Has consent: {hasConsent}.");
-            _consentGranted = LoggerMessage.Define(
-                eventId: 3,
-                logLevel: LogLevel.Debug,
-                formatString: "Consent granted.");
-            _consentWithdrawn = LoggerMessage.Define(
-                eventId: 4,
-                logLevel: LogLevel.Debug,
-                formatString: "Consent withdrawn.");
-            _cookieSuppressed = LoggerMessage.Define<string>(
-                eventId: 5,
-                logLevel: LogLevel.Debug,
-                formatString: "Cookie '{key}' suppressed due to consent policy.");
-            _deleteCookieSuppressed = LoggerMessage.Define<string>(
-                eventId: 6,
-                logLevel: LogLevel.Debug,
-                formatString: "Delete cookie '{key}' suppressed due to developer policy.");
-            _upgradedToSecure = LoggerMessage.Define<string>(
-                eventId: 7,
-                logLevel: LogLevel.Debug,
-                formatString: "Cookie '{key}' upgraded to 'secure'.");
-            _upgradedSameSite = LoggerMessage.Define<string, string>(
-                eventId: 8,
-                logLevel: LogLevel.Debug,
-                formatString: "Cookie '{key}' same site mode upgraded to '{mode}'.");
-            _upgradedToHttpOnly = LoggerMessage.Define<string>(
-                eventId: 9,
-                logLevel: LogLevel.Debug,
-                formatString: "Cookie '{key}' upgraded to 'httponly'.");
-        }
-
-        public static void NeedsConsent(this ILogger logger, bool needsConsent)
-        {
-            _needsConsent(logger, needsConsent, null);
-        }
-
-        public static void HasConsent(this ILogger logger, bool hasConsent)
-        {
-            _hasConsent(logger, hasConsent, null);
-        }
-
-        public static void ConsentGranted(this ILogger logger)
-        {
-            _consentGranted(logger, null);
-        }
-
-        public static void ConsentWithdrawn(this ILogger logger)
-        {
-            _consentWithdrawn(logger, null);
-        }
-
-        public static void CookieSuppressed(this ILogger logger, string key)
-        {
-            _cookieSuppressed(logger, key, null);
-        }
-
-        public static void DeleteCookieSuppressed(this ILogger logger, string key)
-        {
-            _deleteCookieSuppressed(logger, key, null);
-        }
-
-        public static void CookieUpgradedToSecure(this ILogger logger, string key)
-        {
-            _upgradedToSecure(logger, key, null);
-        }
-
-        public static void CookieSameSiteUpgraded(this ILogger logger, string key, string mode)
-        {
-            _upgradedSameSite(logger, key, mode, null);
-        }
-
-        public static void CookieUpgradedToHttpOnly(this ILogger logger, string key)
-        {
-            _upgradedToHttpOnly(logger, key, null);
-        }
-    }
-}
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/Microsoft.AspNetCore.CookiePolicy.csproj b/src/Microsoft.AspNetCore.CookiePolicy/Microsoft.AspNetCore.CookiePolicy.csproj
deleted file mode 100644
index 81760d50a..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/Microsoft.AspNetCore.CookiePolicy.csproj
+++ /dev/null
@@ -1,17 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>ASP.NET Core cookie policy classes to control the behavior of cookies.</Description>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Http" Version="$(MicrosoftAspNetCoreHttpPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="$(MicrosoftExtensionsLoggingAbstractionsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Options" Version="$(MicrosoftExtensionsOptionsPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/ResponseCookiesWrapper.cs b/src/Microsoft.AspNetCore.CookiePolicy/ResponseCookiesWrapper.cs
deleted file mode 100644
index 126c4d7bd..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/ResponseCookiesWrapper.cs
+++ /dev/null
@@ -1,281 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.Extensions.Logging;
-
-namespace Microsoft.AspNetCore.CookiePolicy
-{
-    internal class ResponseCookiesWrapper : IResponseCookies, ITrackingConsentFeature
-    {
-        private const string ConsentValue = "yes";
-        private readonly ILogger _logger;
-        private bool? _isConsentNeeded;
-        private bool? _hasConsent;
-
-        public ResponseCookiesWrapper(HttpContext context, CookiePolicyOptions options, IResponseCookiesFeature feature, ILogger logger)
-        {
-            Context = context;
-            Feature = feature;
-            Options = options;
-            _logger = logger;
-        }
-
-        private HttpContext Context { get; }
-
-        private IResponseCookiesFeature Feature { get; }
-
-        private IResponseCookies Cookies => Feature.Cookies;
-
-        private CookiePolicyOptions Options { get; }
-
-        public bool IsConsentNeeded
-        {
-            get
-            {
-                if (!_isConsentNeeded.HasValue)
-                {
-                    _isConsentNeeded = Options.CheckConsentNeeded == null ? false
-                        : Options.CheckConsentNeeded(Context);
-                    _logger.NeedsConsent(_isConsentNeeded.Value);
-                }
-
-                return _isConsentNeeded.Value;
-            }
-        }
-
-        public bool HasConsent
-        {
-            get
-            {
-                if (!_hasConsent.HasValue)
-                {
-                    var cookie = Context.Request.Cookies[Options.ConsentCookie.Name];
-                    _hasConsent = string.Equals(cookie, ConsentValue, StringComparison.Ordinal);
-                    _logger.HasConsent(_hasConsent.Value);
-                }
-
-                return _hasConsent.Value;
-            }
-        }
-
-        public bool CanTrack => !IsConsentNeeded || HasConsent;
-
-        public void GrantConsent()
-        {
-            if (!HasConsent && !Context.Response.HasStarted)
-            {
-                var cookieOptions = Options.ConsentCookie.Build(Context);
-                // Note policy will be applied. We don't want to bypass policy because we want HttpOnly, Secure, etc. to apply.
-                Append(Options.ConsentCookie.Name, ConsentValue, cookieOptions);
-                _logger.ConsentGranted();
-            }
-            _hasConsent = true;
-        }
-
-        public void WithdrawConsent()
-        {
-            if (HasConsent && !Context.Response.HasStarted)
-            {
-                var cookieOptions = Options.ConsentCookie.Build(Context);
-                // Note policy will be applied. We don't want to bypass policy because we want HttpOnly, Secure, etc. to apply.
-                Delete(Options.ConsentCookie.Name, cookieOptions);
-                _logger.ConsentWithdrawn();
-            }
-            _hasConsent = false;
-        }
-
-        // Note policy will be applied. We don't want to bypass policy because we want HttpOnly, Secure, etc. to apply.
-        public string CreateConsentCookie()
-        {
-            var key = Options.ConsentCookie.Name;
-            var value = ConsentValue;
-            var options = Options.ConsentCookie.Build(Context);
-            ApplyAppendPolicy(ref key, ref value, options);
-
-            var setCookieHeaderValue = new Net.Http.Headers.SetCookieHeaderValue(
-                Uri.EscapeDataString(key),
-                Uri.EscapeDataString(value))
-                {
-                    Domain = options.Domain,
-                    Path = options.Path,
-                    Expires = options.Expires,
-                    MaxAge = options.MaxAge,
-                    Secure = options.Secure,
-                    SameSite = (Net.Http.Headers.SameSiteMode)options.SameSite,
-                    HttpOnly = options.HttpOnly
-                };
-
-            return setCookieHeaderValue.ToString();
-        }
-
-        private bool CheckPolicyRequired()
-        {
-            return !CanTrack
-                || Options.MinimumSameSitePolicy != SameSiteMode.None
-                || Options.HttpOnly != HttpOnlyPolicy.None
-                || Options.Secure != CookieSecurePolicy.None;
-        }
-
-        public void Append(string key, string value)
-        {
-            if (CheckPolicyRequired() || Options.OnAppendCookie != null)
-            {
-                Append(key, value, new CookieOptions());
-            }
-            else
-            {
-                Cookies.Append(key, value);
-            }
-        }
-
-        public void Append(string key, string value, CookieOptions options)
-        {
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            if (ApplyAppendPolicy(ref key, ref value, options))
-            {
-                Cookies.Append(key, value, options);
-            }
-            else
-            {
-                _logger.CookieSuppressed(key);
-            }
-        }
-
-        private bool ApplyAppendPolicy(ref string key, ref string value, CookieOptions options)
-        {
-            var issueCookie = CanTrack || options.IsEssential;
-            ApplyPolicy(key, options);
-            if (Options.OnAppendCookie != null)
-            {
-                var context = new AppendCookieContext(Context, options, key, value)
-                {
-                    IsConsentNeeded = IsConsentNeeded,
-                    HasConsent = HasConsent,
-                    IssueCookie = issueCookie,
-                };
-                Options.OnAppendCookie(context);
-
-                key = context.CookieName;
-                value = context.CookieValue;
-                issueCookie = context.IssueCookie;
-            }
-
-            return issueCookie;
-        }
-
-        public void Delete(string key)
-        {
-            if (CheckPolicyRequired() || Options.OnDeleteCookie != null)
-            {
-                Delete(key, new CookieOptions());
-            }
-            else
-            {
-                Cookies.Delete(key);
-            }
-        }
-
-        public void Delete(string key, CookieOptions options)
-        {
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            // Assume you can always delete cookies unless directly overridden in the user event.
-            var issueCookie = true;
-            ApplyPolicy(key, options);
-            if (Options.OnDeleteCookie != null)
-            {
-                var context = new DeleteCookieContext(Context, options, key)
-                {
-                    IsConsentNeeded = IsConsentNeeded,
-                    HasConsent = HasConsent,
-                    IssueCookie = issueCookie,
-                };
-                Options.OnDeleteCookie(context);
-
-                key = context.CookieName;
-                issueCookie = context.IssueCookie;
-            }
-
-            if (issueCookie)
-            {
-                Cookies.Delete(key, options);
-            }
-            else
-            {
-                _logger.DeleteCookieSuppressed(key);
-            }
-        }
-
-        private void ApplyPolicy(string key, CookieOptions options)
-        {
-            switch (Options.Secure)
-            {
-                case CookieSecurePolicy.Always:
-                    if (!options.Secure)
-                    {
-                        options.Secure = true;
-                        _logger.CookieUpgradedToSecure(key);
-                    }
-                    break;
-                case CookieSecurePolicy.SameAsRequest:
-                    // Never downgrade a cookie
-                    if (Context.Request.IsHttps && !options.Secure)
-                    {
-                        options.Secure = true;
-                        _logger.CookieUpgradedToSecure(key);
-                    }
-                    break;
-                case CookieSecurePolicy.None:
-                    break;
-                default:
-                    throw new InvalidOperationException();
-            }
-            switch (Options.MinimumSameSitePolicy)
-            {
-                case SameSiteMode.None:
-                    break;
-                case SameSiteMode.Lax:
-                    if (options.SameSite == SameSiteMode.None)
-                    {
-                        options.SameSite = SameSiteMode.Lax;
-                        _logger.CookieSameSiteUpgraded(key, "lax");
-                    }
-                    break;
-                case SameSiteMode.Strict:
-                    if (options.SameSite != SameSiteMode.Strict)
-                    {
-                        options.SameSite = SameSiteMode.Strict;
-                        _logger.CookieSameSiteUpgraded(key, "strict");
-                    }
-                    break;
-                default:
-                    throw new InvalidOperationException($"Unrecognized {nameof(SameSiteMode)} value {Options.MinimumSameSitePolicy.ToString()}");
-            }
-            switch (Options.HttpOnly)
-            {
-                case HttpOnlyPolicy.Always:
-                    if (!options.HttpOnly)
-                    {
-                        options.HttpOnly = true;
-                        _logger.CookieUpgradedToHttpOnly(key);
-                    }
-                    break;
-                case HttpOnlyPolicy.None:
-                    break;
-                default:
-                    throw new InvalidOperationException($"Unrecognized {nameof(HttpOnlyPolicy)} value {Options.HttpOnly.ToString()}");
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.AspNetCore.CookiePolicy/baseline.netcore.json b/src/Microsoft.AspNetCore.CookiePolicy/baseline.netcore.json
deleted file mode 100644
index 01a16c57a..000000000
--- a/src/Microsoft.AspNetCore.CookiePolicy/baseline.netcore.json
+++ /dev/null
@@ -1,548 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.AspNetCore.CookiePolicy, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.AspNetCore.Builder.CookiePolicyAppBuilderExtensions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Abstract": true,
-      "Static": true,
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "UseCookiePolicy",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "UseCookiePolicy",
-          "Parameters": [
-            {
-              "Name": "app",
-              "Type": "Microsoft.AspNetCore.Builder.IApplicationBuilder"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Builder.CookiePolicyOptions"
-            }
-          ],
-          "ReturnType": "Microsoft.AspNetCore.Builder.IApplicationBuilder",
-          "Static": true,
-          "Extension": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.Builder.CookiePolicyOptions",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_MinimumSameSitePolicy",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.SameSiteMode",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_MinimumSameSitePolicy",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.SameSiteMode"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_HttpOnly",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.CookiePolicy.HttpOnlyPolicy",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_HttpOnly",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.CookiePolicy.HttpOnlyPolicy"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_Secure",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieSecurePolicy",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Secure",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieSecurePolicy"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ConsentCookie",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieBuilder",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ConsentCookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Http.CookieBuilder"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CheckConsentNeeded",
-          "Parameters": [],
-          "ReturnType": "System.Func<Microsoft.AspNetCore.Http.HttpContext, System.Boolean>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CheckConsentNeeded",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Func<Microsoft.AspNetCore.Http.HttpContext, System.Boolean>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnAppendCookie",
-          "Parameters": [],
-          "ReturnType": "System.Action<Microsoft.AspNetCore.CookiePolicy.AppendCookieContext>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnAppendCookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Action<Microsoft.AspNetCore.CookiePolicy.AppendCookieContext>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_OnDeleteCookie",
-          "Parameters": [],
-          "ReturnType": "System.Action<Microsoft.AspNetCore.CookiePolicy.DeleteCookieContext>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_OnDeleteCookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Action<Microsoft.AspNetCore.CookiePolicy.DeleteCookieContext>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.CookiePolicy.AppendCookieContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Context",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.HttpContext",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieOptions",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieOptions",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieName",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieValue",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieValue",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_IsConsentNeeded",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_HasConsent",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_IssueCookie",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_IssueCookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            },
-            {
-              "Name": "name",
-              "Type": "System.String"
-            },
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.CookiePolicy.CookiePolicyMiddleware",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Options",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Builder.CookiePolicyOptions",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_Options",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "Microsoft.AspNetCore.Builder.CookiePolicyOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Invoke",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            }
-          ],
-          "ReturnType": "System.Threading.Tasks.Task",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "next",
-              "Type": "Microsoft.AspNetCore.Http.RequestDelegate"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptions<Microsoft.AspNetCore.Builder.CookiePolicyOptions>"
-            },
-            {
-              "Name": "factory",
-              "Type": "Microsoft.Extensions.Logging.ILoggerFactory"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "next",
-              "Type": "Microsoft.AspNetCore.Http.RequestDelegate"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.Extensions.Options.IOptions<Microsoft.AspNetCore.Builder.CookiePolicyOptions>"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.CookiePolicy.DeleteCookieContext",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Context",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.HttpContext",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieOptions",
-          "Parameters": [],
-          "ReturnType": "Microsoft.AspNetCore.Http.CookieOptions",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_CookieName",
-          "Parameters": [],
-          "ReturnType": "System.String",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_CookieName",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_IsConsentNeeded",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_HasConsent",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_IssueCookie",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_IssueCookie",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.AspNetCore.Http.HttpContext"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.AspNetCore.Http.CookieOptions"
-            },
-            {
-              "Name": "name",
-              "Type": "System.String"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.AspNetCore.CookiePolicy.HttpOnlyPolicy",
-      "Visibility": "Public",
-      "Kind": "Enumeration",
-      "Sealed": true,
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Field",
-          "Name": "None",
-          "Parameters": [],
-          "GenericParameter": [],
-          "Literal": "0"
-        },
-        {
-          "Kind": "Field",
-          "Name": "Always",
-          "Parameters": [],
-          "GenericParameter": [],
-          "Literal": "1"
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/src/Microsoft.Owin.Security.Interop/AspNetTicketDataFormat.cs b/src/Microsoft.Owin.Security.Interop/AspNetTicketDataFormat.cs
deleted file mode 100644
index f1a07c5bf..000000000
--- a/src/Microsoft.Owin.Security.Interop/AspNetTicketDataFormat.cs
+++ /dev/null
@@ -1,17 +0,0 @@
-// Copyright (c) Microsoft Open Technologies, Inc. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.Owin.Security.DataHandler;
-using Microsoft.Owin.Security.DataHandler.Encoder;
-using Microsoft.Owin.Security.DataProtection;
-
-namespace Microsoft.Owin.Security.Interop
-{
-    public class AspNetTicketDataFormat : SecureDataFormat<AuthenticationTicket>
-    {
-        public AspNetTicketDataFormat(IDataProtector protector)
-            : base(AspNetTicketSerializer.Default, protector, TextEncodings.Base64Url)
-        {
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.Owin.Security.Interop/AspNetTicketSerializer.cs b/src/Microsoft.Owin.Security.Interop/AspNetTicketSerializer.cs
deleted file mode 100644
index 6a1019fbc..000000000
--- a/src/Microsoft.Owin.Security.Interop/AspNetTicketSerializer.cs
+++ /dev/null
@@ -1,220 +0,0 @@
-// Copyright (c) Microsoft Open Technologies, Inc. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.IO;
-using System.Linq;
-using System.Security.Claims;
-using Microsoft.Owin.Security.DataHandler.Serializer;
-
-namespace Microsoft.Owin.Security.Interop
-{
-    // This MUST be kept in sync with Microsoft.AspNetCore.Authentication.DataHandler.TicketSerializer
-    public class AspNetTicketSerializer : IDataSerializer<AuthenticationTicket>
-    {
-        private const string DefaultStringPlaceholder = "\0";
-        private const int FormatVersion = 5;
-
-        public static AspNetTicketSerializer Default { get; } = new AspNetTicketSerializer();
-
-        public virtual byte[] Serialize(AuthenticationTicket ticket)
-        {
-            using (var memory = new MemoryStream())
-            {
-                using (var writer = new BinaryWriter(memory))
-                {
-                    Write(writer, ticket);
-                }
-                return memory.ToArray();
-            }
-        }
-
-        public virtual AuthenticationTicket Deserialize(byte[] data)
-        {
-            using (var memory = new MemoryStream(data))
-            {
-                using (var reader = new BinaryReader(memory))
-                {
-                    return Read(reader);
-                }
-            }
-        }
-
-        public virtual void Write(BinaryWriter writer, AuthenticationTicket ticket)
-        {
-            writer.Write(FormatVersion);
-            writer.Write(ticket.Identity.AuthenticationType);
-
-            var identity = ticket.Identity;
-            if (identity == null)
-            {
-                throw new ArgumentNullException("ticket.Identity");
-            }
-
-            // There is always a single identity
-            writer.Write(1);
-            WriteIdentity(writer, identity);
-            PropertiesSerializer.Write(writer, ticket.Properties);
-        }
-
-        protected virtual void WriteIdentity(BinaryWriter writer, ClaimsIdentity identity)
-        {
-            var authenticationType = identity.AuthenticationType ?? string.Empty;
-
-            writer.Write(authenticationType);
-            WriteWithDefault(writer, identity.NameClaimType, ClaimsIdentity.DefaultNameClaimType);
-            WriteWithDefault(writer, identity.RoleClaimType, ClaimsIdentity.DefaultRoleClaimType);
-
-            // Write the number of claims contained in the identity.
-            writer.Write(identity.Claims.Count());
-
-            foreach (var claim in identity.Claims)
-            {
-                WriteClaim(writer, claim);
-            }
-
-            var bootstrap = identity.BootstrapContext as string;
-            if (!string.IsNullOrEmpty(bootstrap))
-            {
-                writer.Write(true);
-                writer.Write(bootstrap);
-            }
-            else
-            {
-                writer.Write(false);
-            }
-
-            if (identity.Actor != null)
-            {
-                writer.Write(true);
-                WriteIdentity(writer, identity.Actor);
-            }
-            else
-            {
-                writer.Write(false);
-            }
-        }
-
-        protected virtual void WriteClaim(BinaryWriter writer, Claim claim)
-        {
-            WriteWithDefault(writer, claim.Type, claim.Subject?.NameClaimType ?? ClaimsIdentity.DefaultNameClaimType);
-            writer.Write(claim.Value);
-            WriteWithDefault(writer, claim.ValueType, ClaimValueTypes.String);
-            WriteWithDefault(writer, claim.Issuer, ClaimsIdentity.DefaultIssuer);
-            WriteWithDefault(writer, claim.OriginalIssuer, claim.Issuer);
-
-            // Write the number of properties contained in the claim.
-            writer.Write(claim.Properties.Count);
-
-            foreach (var property in claim.Properties)
-            {
-                writer.Write(property.Key ?? string.Empty);
-                writer.Write(property.Value ?? string.Empty);
-            }
-        }
-
-        public virtual AuthenticationTicket Read(BinaryReader reader)
-        {
-            if (reader.ReadInt32() != FormatVersion)
-            {
-                return null;
-            }
-
-            var scheme = reader.ReadString();
-
-            // Any identities after the first will be ignored.
-            var count = reader.ReadInt32();
-            if (count < 0)
-            {
-                return null;
-            }
-
-            var identity = ReadIdentity(reader);
-            var properties = PropertiesSerializer.Read(reader);
-
-            return new AuthenticationTicket(identity, properties);
-        }
-
-        protected virtual ClaimsIdentity ReadIdentity(BinaryReader reader)
-        {
-            var authenticationType = reader.ReadString();
-            var nameClaimType = ReadWithDefault(reader, ClaimsIdentity.DefaultNameClaimType);
-            var roleClaimType = ReadWithDefault(reader, ClaimsIdentity.DefaultRoleClaimType);
-
-            // Read the number of claims contained
-            // in the serialized identity.
-            var count = reader.ReadInt32();
-
-            var identity = new ClaimsIdentity(authenticationType, nameClaimType, roleClaimType);
-
-            for (int index = 0; index != count; ++index)
-            {
-                var claim = ReadClaim(reader, identity);
-
-                identity.AddClaim(claim);
-            }
-
-            // Determine whether the identity
-            // has a bootstrap context attached.
-            if (reader.ReadBoolean())
-            {
-                identity.BootstrapContext = reader.ReadString();
-            }
-
-            // Determine whether the identity
-            // has an actor identity attached.
-            if (reader.ReadBoolean())
-            {
-                identity.Actor = ReadIdentity(reader);
-            }
-
-            return identity;
-        }
-
-        protected virtual Claim ReadClaim(BinaryReader reader, ClaimsIdentity identity)
-        {
-            var type = ReadWithDefault(reader, identity.NameClaimType);
-            var value = reader.ReadString();
-            var valueType = ReadWithDefault(reader, ClaimValueTypes.String);
-            var issuer = ReadWithDefault(reader, ClaimsIdentity.DefaultIssuer);
-            var originalIssuer = ReadWithDefault(reader, issuer);
-
-            var claim = new Claim(type, value, valueType, issuer, originalIssuer, identity);
-
-            // Read the number of properties stored in the claim.
-            var count = reader.ReadInt32();
-
-            for (var index = 0; index != count; ++index)
-            {
-                var key = reader.ReadString();
-                var propertyValue = reader.ReadString();
-
-                claim.Properties.Add(key, propertyValue);
-            }
-
-            return claim;
-        }
-
-        private static void WriteWithDefault(BinaryWriter writer, string value, string defaultValue)
-        {
-            if (string.Equals(value, defaultValue, StringComparison.Ordinal))
-            {
-                writer.Write(DefaultStringPlaceholder);
-            }
-            else
-            {
-                writer.Write(value);
-            }
-        }
-
-        private static string ReadWithDefault(BinaryReader reader, string defaultValue)
-        {
-            var value = reader.ReadString();
-            if (string.Equals(value, DefaultStringPlaceholder, StringComparison.Ordinal))
-            {
-                return defaultValue;
-            }
-            return value;
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.Owin.Security.Interop/ChunkingCookieManager.cs b/src/Microsoft.Owin.Security.Interop/ChunkingCookieManager.cs
deleted file mode 100644
index 1ae4f00cd..000000000
--- a/src/Microsoft.Owin.Security.Interop/ChunkingCookieManager.cs
+++ /dev/null
@@ -1,280 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Globalization;
-using System.Linq;
-using Microsoft.Owin.Infrastructure;
-
-namespace Microsoft.Owin.Security.Interop
-{
-    // This MUST be kept in sync with Microsoft.AspNetCore.Authentication.Cookies.ChunkingCookieManager
-    /// <summary>
-    /// This handles cookies that are limited by per cookie length. It breaks down long cookies for responses, and reassembles them
-    /// from requests.
-    /// </summary>
-    public class ChunkingCookieManager : ICookieManager
-    {
-        private const string ChunkKeySuffix = "C";
-        private const string ChunkCountPrefix = "chunks-";
-
-        public ChunkingCookieManager()
-        {
-            // Lowest common denominator. Safari has the lowest known limit (4093), and we leave little extra just in case.
-            // See http://browsercookielimits.x64.me/.
-            // Leave at least 20 in case CookiePolicy tries to add 'secure' and/or 'httponly'.
-            ChunkSize = 4070;
-        }
-
-        /// <summary>
-        /// The maximum size of cookie to send back to the client. If a cookie exceeds this size it will be broken down into multiple
-        /// cookies. Set this value to null to disable this behavior. The default is 4090 characters, which is supported by all
-        /// common browsers.
-        ///
-        /// Note that browsers may also have limits on the total size of all cookies per domain, and on the number of cookies per domain.
-        /// </summary>
-        public int? ChunkSize { get; set; }
-
-        /// <summary>
-        /// Throw if not all chunks of a cookie are available on a request for re-assembly.
-        /// </summary>
-        public bool ThrowForPartialCookies { get; set; }
-
-        // Parse the "chunks-XX" to determine how many chunks there should be.
-        private static int ParseChunksCount(string value)
-        {
-            if (value != null && value.StartsWith(ChunkCountPrefix, StringComparison.Ordinal))
-            {
-                var chunksCountString = value.Substring(ChunkCountPrefix.Length);
-                int chunksCount;
-                if (int.TryParse(chunksCountString, NumberStyles.None, CultureInfo.InvariantCulture, out chunksCount))
-                {
-                    return chunksCount;
-                }
-            }
-            return 0;
-        }
-
-        /// <summary>
-        /// Get the reassembled cookie. Non chunked cookies are returned normally.
-        /// Cookies with missing chunks just have their "chunks-XX" header returned.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <returns>The reassembled cookie, if any, or null.</returns>
-        public string GetRequestCookie(IOwinContext context, string key)
-        {
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-
-            if (key == null)
-            {
-                throw new ArgumentNullException(nameof(key));
-            }
-
-            var requestCookies = context.Request.Cookies;
-            var value = requestCookies[key];
-            var chunksCount = ParseChunksCount(value);
-            if (chunksCount > 0)
-            {
-                var chunks = new string[chunksCount];
-                for (var chunkId = 1; chunkId <= chunksCount; chunkId++)
-                {
-                    var chunk = requestCookies[key + ChunkKeySuffix + chunkId.ToString(CultureInfo.InvariantCulture)];
-                    if (string.IsNullOrEmpty(chunk))
-                    {
-                        if (ThrowForPartialCookies)
-                        {
-                            var totalSize = 0;
-                            for (int i = 0; i < chunkId - 1; i++)
-                            {
-                                totalSize += chunks[i].Length;
-                            }
-                            throw new FormatException(
-                                string.Format(CultureInfo.CurrentCulture, 
-                                "The chunked cookie is incomplete. Only {0} of the expected {1} chunks were found, totaling {2} characters. A client size limit may have been exceeded.",
-                                chunkId - 1, chunksCount, totalSize));
-                        }
-                        // Missing chunk, abort by returning the original cookie value. It may have been a false positive?
-                        return value;
-                    }
-
-                    chunks[chunkId - 1] = chunk;
-                }
-
-                return string.Join(string.Empty, chunks);
-            }
-            return value;
-        }
-
-        /// <summary>
-        /// Appends a new response cookie to the Set-Cookie header. If the cookie is larger than the given size limit
-        /// then it will be broken down into multiple cookies as follows:
-        /// Set-Cookie: CookieName=chunks-3; path=/
-        /// Set-Cookie: CookieNameC1=Segment1; path=/
-        /// Set-Cookie: CookieNameC2=Segment2; path=/
-        /// Set-Cookie: CookieNameC3=Segment3; path=/
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <param name="value"></param>
-        /// <param name="options"></param>
-        public void AppendResponseCookie(IOwinContext context, string key, string value, CookieOptions options)
-        {
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-
-            if (key == null)
-            {
-                throw new ArgumentNullException(nameof(key));
-            }
-
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            var domainHasValue = !string.IsNullOrEmpty(options.Domain);
-            var pathHasValue = !string.IsNullOrEmpty(options.Path);
-            var expiresHasValue = options.Expires.HasValue;
-
-            var templateLength = key.Length + "=".Length
-                + (domainHasValue ? "; domain=".Length + options.Domain.Length : 0)
-                + (pathHasValue ? "; path=".Length + options.Path.Length : 0)
-                + (expiresHasValue ? "; expires=ddd, dd-MMM-yyyy HH:mm:ss GMT".Length : 0)
-                + (options.Secure ? "; secure".Length : 0)
-                + (options.HttpOnly ? "; HttpOnly".Length : 0);
-
-            // Normal cookie
-            var responseCookies = context.Response.Cookies;
-            if (!ChunkSize.HasValue || ChunkSize.Value > templateLength + value.Length)
-            {
-                responseCookies.Append(key, value, options);
-            }
-            else if (ChunkSize.Value < templateLength + 10)
-            {
-                // 10 is the minimum data we want to put in an individual cookie, including the cookie chunk identifier "CXX".
-                // No room for data, we can't chunk the options and name
-                throw new InvalidOperationException("The cookie key and options are larger than ChunksSize, leaving no room for data.");
-            }
-            else
-            {
-                // Break the cookie down into multiple cookies.
-                // Key = CookieName, value = "Segment1Segment2Segment2"
-                // Set-Cookie: CookieName=chunks-3; path=/
-                // Set-Cookie: CookieNameC1="Segment1"; path=/
-                // Set-Cookie: CookieNameC2="Segment2"; path=/
-                // Set-Cookie: CookieNameC3="Segment3"; path=/
-                var dataSizePerCookie = ChunkSize.Value - templateLength - 3; // Budget 3 chars for the chunkid.
-                var cookieChunkCount = (int)Math.Ceiling(value.Length * 1.0 / dataSizePerCookie);
-
-                responseCookies.Append(key, ChunkCountPrefix + cookieChunkCount.ToString(CultureInfo.InvariantCulture), options);
-
-                var offset = 0;
-                for (var chunkId = 1; chunkId <= cookieChunkCount; chunkId++)
-                {
-                    var remainingLength = value.Length - offset;
-                    var length = Math.Min(dataSizePerCookie, remainingLength);
-                    var segment = value.Substring(offset, length);
-                    offset += length;
-
-                    responseCookies.Append(key + ChunkKeySuffix + chunkId.ToString(CultureInfo.InvariantCulture), segment, options);
-                }
-            }
-        }
-
-        /// <summary>
-        /// Deletes the cookie with the given key by setting an expired state. If a matching chunked cookie exists on
-        /// the request, delete each chunk.
-        /// </summary>
-        /// <param name="context"></param>
-        /// <param name="key"></param>
-        /// <param name="options"></param>
-        public void DeleteCookie(IOwinContext context, string key, CookieOptions options)
-        {
-            if (context == null)
-            {
-                throw new ArgumentNullException(nameof(context));
-            }
-
-            if (key == null)
-            {
-                throw new ArgumentNullException(nameof(key));
-            }
-
-            if (options == null)
-            {
-                throw new ArgumentNullException(nameof(options));
-            }
-
-            var keys = new List<string>();
-            keys.Add(key + "=");
-
-            var requestCookie = context.Request.Cookies[key];
-            var chunks = ParseChunksCount(requestCookie);
-            if (chunks > 0)
-            {
-                for (int i = 1; i <= chunks + 1; i++)
-                {
-                    var subkey = key + ChunkKeySuffix + i.ToString(CultureInfo.InvariantCulture);
-                    keys.Add(subkey + "=");
-                }
-            }
-
-            var domainHasValue = !string.IsNullOrEmpty(options.Domain);
-            var pathHasValue = !string.IsNullOrEmpty(options.Path);
-
-            Func<string, bool> rejectPredicate;
-            Func<string, bool> predicate = value => keys.Any(k => value.StartsWith(k, StringComparison.OrdinalIgnoreCase));
-            if (domainHasValue)
-            {
-                rejectPredicate = value => predicate(value) && value.IndexOf("domain=" + options.Domain, StringComparison.OrdinalIgnoreCase) != -1;
-            }
-            else if (pathHasValue)
-            {
-                rejectPredicate = value => predicate(value) && value.IndexOf("path=" + options.Path, StringComparison.OrdinalIgnoreCase) != -1;
-            }
-            else
-            {
-                rejectPredicate = value => predicate(value);
-            }
-
-            var responseHeaders = context.Response.Headers;
-            string[] existingValues;
-            if (responseHeaders.TryGetValue(Constants.Headers.SetCookie, out existingValues) && existingValues != null)
-            {
-                responseHeaders.SetValues(Constants.Headers.SetCookie, existingValues.Where(value => !rejectPredicate(value)).ToArray());
-            }
-
-            AppendResponseCookie(
-                context,
-                key,
-                string.Empty,
-                new CookieOptions()
-                {
-                    Path = options.Path,
-                    Domain = options.Domain,
-                    Expires = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc),
-                });
-
-            for (int i = 1; i <= chunks; i++)
-            {
-                AppendResponseCookie(
-                    context,
-                    key + "C" + i.ToString(CultureInfo.InvariantCulture),
-                    string.Empty,
-                    new CookieOptions()
-                    {
-                        Path = options.Path,
-                        Domain = options.Domain,
-                        Expires = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc),
-                    });
-            }
-        }
-    }
-}
diff --git a/src/Microsoft.Owin.Security.Interop/Constants.cs b/src/Microsoft.Owin.Security.Interop/Constants.cs
deleted file mode 100644
index 1e75761b7..000000000
--- a/src/Microsoft.Owin.Security.Interop/Constants.cs
+++ /dev/null
@@ -1,13 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-namespace Microsoft.Owin.Security.Interop
-{
-    internal static class Constants
-    {
-        internal static class Headers
-        {
-            internal const string SetCookie = "Set-Cookie";
-        }
-    }
-}
diff --git a/src/Microsoft.Owin.Security.Interop/DataProtectorShim.cs b/src/Microsoft.Owin.Security.Interop/DataProtectorShim.cs
deleted file mode 100644
index 731358894..000000000
--- a/src/Microsoft.Owin.Security.Interop/DataProtectorShim.cs
+++ /dev/null
@@ -1,31 +0,0 @@
-// Copyright (c) Microsoft Open Technologies, Inc. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.DataProtection;
-
-namespace Microsoft.Owin.Security.Interop
-{
-    /// <summary>
-    /// Converts an <see cref="IDataProtector"/> to an
-    /// <see cref="Microsoft.Owin.Security.DataProtection.IDataProtector"/>.
-    /// </summary>
-    public sealed class DataProtectorShim : Microsoft.Owin.Security.DataProtection.IDataProtector
-    {
-        private readonly IDataProtector _protector;
-
-        public DataProtectorShim(IDataProtector protector)
-        {
-            _protector = protector;
-        }
-
-        public byte[] Protect(byte[] userData)
-        {
-            return _protector.Protect(userData);
-        }
-
-        public byte[] Unprotect(byte[] protectedData)
-        {
-            return _protector.Unprotect(protectedData);
-        }
-    }
-}
\ No newline at end of file
diff --git a/src/Microsoft.Owin.Security.Interop/Microsoft.Owin.Security.Interop.csproj b/src/Microsoft.Owin.Security.Interop/Microsoft.Owin.Security.Interop.csproj
deleted file mode 100644
index a12bc6563..000000000
--- a/src/Microsoft.Owin.Security.Interop/Microsoft.Owin.Security.Interop.csproj
+++ /dev/null
@@ -1,16 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <Description>A compatibility layer for sharing authentication tickets between Microsoft.Owin.Security and Microsoft.AspNetCore.Authentication.</Description>
-    <TargetFramework>net461</TargetFramework>
-    <NoWarn>$(NoWarn);CS1591</NoWarn>
-    <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <PackageTags>aspnetcore;katana;owin;security</PackageTags>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection.Extensions" Version="$(MicrosoftAspNetCoreDataProtectionExtensionsPackageVersion)" />
-    <PackageReference Include="Microsoft.Owin.Security" Version="$(MicrosoftOwinSecurityPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/src/Microsoft.Owin.Security.Interop/Properties/AssemblyInfo.cs b/src/Microsoft.Owin.Security.Interop/Properties/AssemblyInfo.cs
deleted file mode 100644
index 490fa7cb2..000000000
--- a/src/Microsoft.Owin.Security.Interop/Properties/AssemblyInfo.cs
+++ /dev/null
@@ -1,8 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Runtime.InteropServices;
-
-// The following GUID is for the ID of the typelib if this project is exposed to COM
-[assembly: Guid("a7922dd8-09f1-43e4-938b-cc523ea08898")]
-
diff --git a/src/Microsoft.Owin.Security.Interop/baseline.netframework.json b/src/Microsoft.Owin.Security.Interop/baseline.netframework.json
deleted file mode 100644
index bfc0c0076..000000000
--- a/src/Microsoft.Owin.Security.Interop/baseline.netframework.json
+++ /dev/null
@@ -1,372 +0,0 @@
-{
-  "AssemblyIdentity": "Microsoft.Owin.Security.Interop, Version=2.1.1.0, Culture=neutral, PublicKeyToken=adb9793829ddae60",
-  "Types": [
-    {
-      "Name": "Microsoft.Owin.Security.Interop.AspNetTicketDataFormat",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "BaseType": "Microsoft.Owin.Security.DataHandler.SecureDataFormat<Microsoft.Owin.Security.AuthenticationTicket>",
-      "ImplementedInterfaces": [],
-      "Members": [
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "protector",
-              "Type": "Microsoft.Owin.Security.DataProtection.IDataProtector"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.Owin.Security.Interop.AspNetTicketSerializer",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.Owin.Security.DataHandler.Serializer.IDataSerializer<Microsoft.Owin.Security.AuthenticationTicket>"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_Default",
-          "Parameters": [],
-          "ReturnType": "Microsoft.Owin.Security.Interop.AspNetTicketSerializer",
-          "Static": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Serialize",
-          "Parameters": [
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.Owin.Security.AuthenticationTicket"
-            }
-          ],
-          "ReturnType": "System.Byte[]",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Owin.Security.DataHandler.Serializer.IDataSerializer<Microsoft.Owin.Security.AuthenticationTicket>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Deserialize",
-          "Parameters": [
-            {
-              "Name": "data",
-              "Type": "System.Byte[]"
-            }
-          ],
-          "ReturnType": "Microsoft.Owin.Security.AuthenticationTicket",
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Owin.Security.DataHandler.Serializer.IDataSerializer<Microsoft.Owin.Security.AuthenticationTicket>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Write",
-          "Parameters": [
-            {
-              "Name": "writer",
-              "Type": "System.IO.BinaryWriter"
-            },
-            {
-              "Name": "ticket",
-              "Type": "Microsoft.Owin.Security.AuthenticationTicket"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "WriteIdentity",
-          "Parameters": [
-            {
-              "Name": "writer",
-              "Type": "System.IO.BinaryWriter"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "WriteClaim",
-          "Parameters": [
-            {
-              "Name": "writer",
-              "Type": "System.IO.BinaryWriter"
-            },
-            {
-              "Name": "claim",
-              "Type": "System.Security.Claims.Claim"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Read",
-          "Parameters": [
-            {
-              "Name": "reader",
-              "Type": "System.IO.BinaryReader"
-            }
-          ],
-          "ReturnType": "Microsoft.Owin.Security.AuthenticationTicket",
-          "Virtual": true,
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ReadIdentity",
-          "Parameters": [
-            {
-              "Name": "reader",
-              "Type": "System.IO.BinaryReader"
-            }
-          ],
-          "ReturnType": "System.Security.Claims.ClaimsIdentity",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "ReadClaim",
-          "Parameters": [
-            {
-              "Name": "reader",
-              "Type": "System.IO.BinaryReader"
-            },
-            {
-              "Name": "identity",
-              "Type": "System.Security.Claims.ClaimsIdentity"
-            }
-          ],
-          "ReturnType": "System.Security.Claims.Claim",
-          "Virtual": true,
-          "Visibility": "Protected",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.Owin.Security.Interop.ChunkingCookieManager",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "ImplementedInterfaces": [
-        "Microsoft.Owin.Infrastructure.ICookieManager"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "get_ChunkSize",
-          "Parameters": [],
-          "ReturnType": "System.Nullable<System.Int32>",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ChunkSize",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Nullable<System.Int32>"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "get_ThrowForPartialCookies",
-          "Parameters": [],
-          "ReturnType": "System.Boolean",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "set_ThrowForPartialCookies",
-          "Parameters": [
-            {
-              "Name": "value",
-              "Type": "System.Boolean"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "GetRequestCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.Owin.IOwinContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            }
-          ],
-          "ReturnType": "System.String",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Owin.Infrastructure.ICookieManager",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "AppendResponseCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.Owin.IOwinContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            },
-            {
-              "Name": "value",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.Owin.CookieOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Owin.Infrastructure.ICookieManager",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "DeleteCookie",
-          "Parameters": [
-            {
-              "Name": "context",
-              "Type": "Microsoft.Owin.IOwinContext"
-            },
-            {
-              "Name": "key",
-              "Type": "System.String"
-            },
-            {
-              "Name": "options",
-              "Type": "Microsoft.Owin.CookieOptions"
-            }
-          ],
-          "ReturnType": "System.Void",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Owin.Infrastructure.ICookieManager",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    },
-    {
-      "Name": "Microsoft.Owin.Security.Interop.DataProtectorShim",
-      "Visibility": "Public",
-      "Kind": "Class",
-      "Sealed": true,
-      "ImplementedInterfaces": [
-        "Microsoft.Owin.Security.DataProtection.IDataProtector"
-      ],
-      "Members": [
-        {
-          "Kind": "Method",
-          "Name": "Protect",
-          "Parameters": [
-            {
-              "Name": "userData",
-              "Type": "System.Byte[]"
-            }
-          ],
-          "ReturnType": "System.Byte[]",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Owin.Security.DataProtection.IDataProtector",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Method",
-          "Name": "Unprotect",
-          "Parameters": [
-            {
-              "Name": "protectedData",
-              "Type": "System.Byte[]"
-            }
-          ],
-          "ReturnType": "System.Byte[]",
-          "Sealed": true,
-          "Virtual": true,
-          "ImplementedInterface": "Microsoft.Owin.Security.DataProtection.IDataProtector",
-          "Visibility": "Public",
-          "GenericParameter": []
-        },
-        {
-          "Kind": "Constructor",
-          "Name": ".ctor",
-          "Parameters": [
-            {
-              "Name": "protector",
-              "Type": "Microsoft.AspNetCore.DataProtection.IDataProtector"
-            }
-          ],
-          "Visibility": "Public",
-          "GenericParameter": []
-        }
-      ],
-      "GenericParameters": []
-    }
-  ]
-}
\ No newline at end of file
diff --git a/test/Directory.Build.props b/test/Directory.Build.props
deleted file mode 100644
index c42d54465..000000000
--- a/test/Directory.Build.props
+++ /dev/null
@@ -1,12 +0,0 @@
-<Project>
-  <Import Project="..\Directory.Build.props" />
-
-  <ItemGroup>
-    <PackageReference Include="Internal.AspNetCore.Sdk" PrivateAssets="All" Version="$(InternalAspNetCoreSdkPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Testing" Version="$(MicrosoftAspNetCoreTestingPackageVersion)" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="$(MicrosoftNETTestSdkPackageVersion)" />
-    <PackageReference Include="xunit" Version="$(XunitPackageVersion)" />
-    <PackageReference Include="xunit.analyzers" Version="$(XunitAnalyzersPackageVersion)" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="$(XunitRunnerVisualStudioPackageVersion)" />
-  </ItemGroup>
-</Project>
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/AuthenticationMiddlewareTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/AuthenticationMiddlewareTests.cs
deleted file mode 100644
index b09f13cab..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/AuthenticationMiddlewareTests.cs
+++ /dev/null
@@ -1,196 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class AuthenticationMiddlewareTests
-    {
-        [Fact]
-        public async Task OnlyInvokesCanHandleRequestHandlers()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                })
-                .ConfigureServices(services => services.AddAuthentication(o =>
-                {
-                    o.AddScheme("Skip", s =>
-                    {
-                        s.HandlerType = typeof(SkipHandler);
-                    });
-                    // Won't get hit since CanHandleRequests is false
-                    o.AddScheme("throws", s =>
-                    {
-                        s.HandlerType = typeof(ThrowsHandler);
-                    });
-                    o.AddScheme("607", s =>
-                    {
-                        s.HandlerType = typeof(SixOhSevenHandler);
-                    });
-                    // Won't get run since 607 will finish
-                    o.AddScheme("305", s =>
-                    {
-                        s.HandlerType = typeof(ThreeOhFiveHandler);
-                    });
-                }));
-            var server = new TestServer(builder);
-            var response = await server.CreateClient().GetAsync("http://example.com/");
-            Assert.Equal(607, (int)response.StatusCode);
-        }
-
-        private class ThreeOhFiveHandler : StatusCodeHandler {
-            public ThreeOhFiveHandler() : base(305) { }
-        }
-
-        private class SixOhSevenHandler : StatusCodeHandler
-        {
-            public SixOhSevenHandler() : base(607) { }
-        }
-
-        private class SevenOhSevenHandler : StatusCodeHandler
-        {
-            public SevenOhSevenHandler() : base(707) { }
-        }
-
-        private class StatusCodeHandler : IAuthenticationRequestHandler
-        {
-            private HttpContext _context;
-            private int _code;
-
-            public StatusCodeHandler(int code)
-            {
-                _code = code;
-            }
-            
-            public Task<AuthenticateResult> AuthenticateAsync()
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task ChallengeAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task ForbidAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task<bool> HandleRequestAsync()
-            {
-                _context.Response.StatusCode = _code;
-                return Task.FromResult(true);
-            }
-
-            public Task InitializeAsync(AuthenticationScheme scheme, HttpContext context)
-            {
-                _context = context;
-                return Task.FromResult(0);
-            }
-
-            public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task SignOutAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-        }
-
-        private class ThrowsHandler : IAuthenticationHandler
-        {
-            private HttpContext _context;
-
-            public Task<AuthenticateResult> AuthenticateAsync()
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task ChallengeAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task ForbidAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task<bool> HandleRequestAsync()
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task InitializeAsync(AuthenticationScheme scheme, HttpContext context)
-            {
-                _context = context;
-                return Task.FromResult(0);
-            }
-
-            public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task SignOutAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-        }
-
-        private class SkipHandler : IAuthenticationRequestHandler
-        {
-            private HttpContext _context;
-
-            public Task<AuthenticateResult> AuthenticateAsync()
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task ChallengeAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task ForbidAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task<bool> HandleRequestAsync()
-            {
-                return Task.FromResult(false);
-            }
-
-            public Task InitializeAsync(AuthenticationScheme scheme, HttpContext context)
-            {
-                _context = context;
-                return Task.FromResult(0);
-            }
-
-            public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-
-            public Task SignOutAsync(AuthenticationProperties properties)
-            {
-                throw new NotImplementedException();
-            }
-        }
-
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/Base64UrlTextEncoderTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/Base64UrlTextEncoderTests.cs
deleted file mode 100644
index 3195298c0..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/Base64UrlTextEncoderTests.cs
+++ /dev/null
@@ -1,30 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class Base64UrlTextEncoderTests
-    {
-        [Fact]
-        public void DataOfVariousLengthRoundTripCorrectly()
-        {
-            for (int length = 0; length != 256; ++length)
-            {
-                var data = new byte[length];
-                for (int index = 0; index != length; ++index)
-                {
-                    data[index] = (byte)(5 + length + (index * 23));
-                }
-                string text = Base64UrlTextEncoder.Encode(data);
-                byte[] result = Base64UrlTextEncoder.Decode(text);
-
-                for (int index = 0; index != length; ++index)
-                {
-                    Assert.Equal(data[index], result[index]);
-                }
-            }
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/ClaimActionTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/ClaimActionTests.cs
deleted file mode 100644
index b083e9d76..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/ClaimActionTests.cs
+++ /dev/null
@@ -1,112 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.IO;
-using System.Linq;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Testing.xunit;
-using Xunit;
-using Microsoft.AspNetCore.Authentication.OAuth.Claims;
-using Newtonsoft.Json.Linq;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class ClaimActionTests
-    {
-        [Fact]
-        public void CanMapSingleValueUserDataToClaim()
-        {
-            var userData = new JObject
-            {
-                ["name"] = "test"
-            };
-
-            var identity = new ClaimsIdentity();
-
-            var action = new JsonKeyClaimAction("name", "name", "name");
-            action.Run(userData, identity, "iss");
-
-            Assert.Equal("name", identity.FindFirst("name").Type);
-            Assert.Equal("test", identity.FindFirst("name").Value);
-        }
-
-        [Fact]
-        public void CanMapArrayValueUserDataToClaims()
-        {
-            var userData = new JObject
-            {
-                ["role"] = new JArray { "role1", "role2" }
-            };
-
-            var identity = new ClaimsIdentity();
-
-            var action = new JsonKeyClaimAction("role", "role", "role");
-            action.Run(userData, identity, "iss");
-
-            var roleClaims = identity.FindAll("role").ToList();
-            Assert.Equal(2, roleClaims.Count);
-            Assert.Equal("role", roleClaims[0].Type);
-            Assert.Equal("role1", roleClaims[0].Value);
-            Assert.Equal("role", roleClaims[1].Type);
-            Assert.Equal("role2", roleClaims[1].Value);
-        }
-
-        [Fact]
-        public void MapAllSucceeds()
-        {
-            var userData = new JObject
-            {
-                ["name0"] = "value0",
-                ["name1"] = "value1",
-            };
-
-            var identity = new ClaimsIdentity();
-            var action = new MapAllClaimsAction();
-            action.Run(userData, identity, "iss");
-
-            Assert.Equal("name0", identity.FindFirst("name0").Type);
-            Assert.Equal("value0", identity.FindFirst("name0").Value);
-            Assert.Equal("name1", identity.FindFirst("name1").Type);
-            Assert.Equal("value1", identity.FindFirst("name1").Value);
-        }
-
-        [Fact]
-        public void MapAllAllowesDulicateKeysWithUniqueValues()
-        {
-            var userData = new JObject
-            {
-                ["name0"] = "value0",
-                ["name1"] = "value1",
-            };
-
-            var identity = new ClaimsIdentity();
-            identity.AddClaim(new Claim("name0", "value2"));
-            identity.AddClaim(new Claim("name1", "value3"));
-            var action = new MapAllClaimsAction();
-            action.Run(userData, identity, "iss");
-
-            Assert.Equal(2, identity.FindAll("name0").Count());
-            Assert.Equal(2, identity.FindAll("name1").Count());
-        }
-
-        [Fact]
-        public void MapAllSkipsDuplicateValues()
-        {
-            var userData = new JObject
-            {
-                ["name0"] = "value0",
-                ["name1"] = "value1",
-            };
-
-            var identity = new ClaimsIdentity();
-            identity.AddClaim(new Claim("name0", "value0"));
-            identity.AddClaim(new Claim("name1", "value1"));
-            var action = new MapAllClaimsAction();
-            action.Run(userData, identity, "iss");
-
-            Assert.Single(identity.FindAll("name0"));
-            Assert.Single(identity.FindAll("name1"));
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/CookieTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/CookieTests.cs
deleted file mode 100644
index 107fc5db1..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/CookieTests.cs
+++ /dev/null
@@ -1,1573 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using System.Net;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Security.Principal;
-using System.Text;
-using System.Threading.Tasks;
-using System.Xml.Linq;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.AspNetCore.Testing.xunit;
-using Microsoft.Extensions.DependencyInjection;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Cookies
-{
-    public class CookieTests : SharedAuthenticationTests<CookieAuthenticationOptions>
-    {
-        private TestClock _clock = new TestClock();
-
-        protected override string DefaultScheme => CookieAuthenticationDefaults.AuthenticationScheme;
-        protected override Type HandlerType => typeof(CookieAuthenticationHandler);
-
-        protected override void RegisterAuth(AuthenticationBuilder services, Action<CookieAuthenticationOptions> configure)
-        {
-            services.AddCookie(configure);
-        }
-
-        [Fact]
-        public async Task NormalRequestPassesThrough()
-        {
-            var server = CreateServer(s => { });
-            var response = await server.CreateClient().GetAsync("http://example.com/normal");
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-        }
-
-        [Fact]
-        public async Task AjaxLoginRedirectToReturnUrlTurnsInto200WithLocationHeader()
-        {
-            var server = CreateServer(o => o.LoginPath = "/login");
-            var transaction = await SendAsync(server, "http://example.com/challenge?X-Requested-With=XMLHttpRequest");
-            Assert.Equal(HttpStatusCode.Unauthorized, transaction.Response.StatusCode);
-            var responded = transaction.Response.Headers.GetValues("Location");
-            Assert.Single(responded);
-            Assert.StartsWith("http://example.com/login", responded.Single());
-        }
-
-        [Fact]
-        public async Task AjaxForbidTurnsInto403WithLocationHeader()
-        {
-            var server = CreateServer(o => o.AccessDeniedPath = "/denied");
-            var transaction = await SendAsync(server, "http://example.com/forbid?X-Requested-With=XMLHttpRequest");
-            Assert.Equal(HttpStatusCode.Forbidden, transaction.Response.StatusCode);
-            var responded = transaction.Response.Headers.GetValues("Location");
-            Assert.Single(responded);
-            Assert.StartsWith("http://example.com/denied", responded.Single());
-        }
-
-        [Fact]
-        public async Task AjaxLogoutRedirectToReturnUrlTurnsInto200WithLocationHeader()
-        {
-            var server = CreateServer(o => o.LogoutPath = "/signout");
-            var transaction = await SendAsync(server, "http://example.com/signout?X-Requested-With=XMLHttpRequest&ReturnUrl=/");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            var responded = transaction.Response.Headers.GetValues("Location");
-            Assert.Single(responded);
-            Assert.StartsWith("/", responded.Single());
-        }
-
-        [Fact]
-        public async Task AjaxChallengeRedirectTurnsInto200WithLocationHeader()
-        {
-            var server = CreateServer(s => { });
-            var transaction = await SendAsync(server, "http://example.com/challenge?X-Requested-With=XMLHttpRequest&ReturnUrl=/");
-            Assert.Equal(HttpStatusCode.Unauthorized, transaction.Response.StatusCode);
-            var responded = transaction.Response.Headers.GetValues("Location");
-            Assert.Single(responded);
-            Assert.StartsWith("http://example.com/Account/Login", responded.Single());
-        }
-
-        [Fact]
-        public async Task ProtectedCustomRequestShouldRedirectToCustomRedirectUri()
-        {
-            var server = CreateServer(s => { });
-
-            var transaction = await SendAsync(server, "http://example.com/protected/CustomRedirect");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location;
-            Assert.Equal("http://example.com/Account/Login?ReturnUrl=%2FCustomRedirect", location.ToString());
-        }
-
-        private Task SignInAsAlice(HttpContext context)
-        {
-            var user = new ClaimsIdentity(new GenericIdentity("Alice", "Cookies"));
-            user.AddClaim(new Claim("marker", "true"));
-            return context.SignInAsync("Cookies",
-                new ClaimsPrincipal(user),
-                new AuthenticationProperties());
-        }
-
-        private Task SignInAsWrong(HttpContext context)
-        {
-            return context.SignInAsync("Oops",
-                new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies"))),
-                new AuthenticationProperties());
-        }
-
-        private Task SignOutAsWrong(HttpContext context)
-        {
-            return context.SignOutAsync("Oops");
-        }
-
-        [Fact]
-        public async Task SignInCausesDefaultCookieToBeCreated()
-        {
-            var server = CreateServerWithServices(s => s.AddAuthentication().AddCookie(o =>
-            {
-                o.LoginPath = new PathString("/login");
-                o.Cookie.Name = "TestCookie";
-            }), SignInAsAlice);
-
-            var transaction = await SendAsync(server, "http://example.com/testpath");
-
-            var setCookie = transaction.SetCookie;
-            Assert.StartsWith("TestCookie=", setCookie);
-            Assert.Contains("; path=/", setCookie);
-            Assert.Contains("; httponly", setCookie);
-            Assert.Contains("; samesite=", setCookie);
-            Assert.DoesNotContain("; expires=", setCookie);
-            Assert.DoesNotContain("; domain=", setCookie);
-            Assert.DoesNotContain("; secure", setCookie);
-        }
-
-        [Fact]
-        public async Task CookieExpirationOptionIsIgnored()
-        {
-            var server = CreateServerWithServices(s => s.AddAuthentication().AddCookie(o =>
-            {
-                o.Cookie.Name = "TestCookie";
-                // this is currently ignored. Users should set o.ExpireTimeSpan instead
-                o.Cookie.Expiration = TimeSpan.FromDays(10);
-            }), SignInAsAlice);
-
-            var transaction = await SendAsync(server, "http://example.com/testpath");
-
-            var setCookie = transaction.SetCookie;
-            Assert.StartsWith("TestCookie=", setCookie);
-            Assert.DoesNotContain("; expires=", setCookie);
-        }
-
-        [Fact]
-        public async Task SignInWrongAuthTypeThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = new PathString("/login");
-                o.Cookie.Name = "TestCookie";
-            }, SignInAsWrong);
-
-            await Assert.ThrowsAsync<InvalidOperationException>(async () => await SendAsync(server, "http://example.com/testpath"));
-        }
-
-        [Fact]
-        public async Task SignOutWrongAuthTypeThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = new PathString("/login");
-                o.Cookie.Name = "TestCookie";
-            }, SignOutAsWrong);
-
-            await Assert.ThrowsAsync<InvalidOperationException>(async () => await SendAsync(server, "http://example.com/testpath"));
-        }
-
-        [Theory]
-        [InlineData(CookieSecurePolicy.Always, "http://example.com/testpath", true)]
-        [InlineData(CookieSecurePolicy.Always, "https://example.com/testpath", true)]
-        [InlineData(CookieSecurePolicy.None, "http://example.com/testpath", false)]
-        [InlineData(CookieSecurePolicy.None, "https://example.com/testpath", false)]
-        [InlineData(CookieSecurePolicy.SameAsRequest, "http://example.com/testpath", false)]
-        [InlineData(CookieSecurePolicy.SameAsRequest, "https://example.com/testpath", true)]
-        public async Task SecureSignInCausesSecureOnlyCookieByDefault(
-            CookieSecurePolicy cookieSecurePolicy,
-            string requestUri,
-            bool shouldBeSecureOnly)
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = new PathString("/login");
-                o.Cookie.Name = "TestCookie";
-                o.Cookie.SecurePolicy = cookieSecurePolicy;
-            }, SignInAsAlice);
-
-            var transaction = await SendAsync(server, requestUri);
-            var setCookie = transaction.SetCookie;
-
-            if (shouldBeSecureOnly)
-            {
-                Assert.Contains("; secure", setCookie);
-            }
-            else
-            {
-                Assert.DoesNotContain("; secure", setCookie);
-            }
-        }
-
-        [Fact]
-        public async Task CookieOptionsAlterSetCookieHeader()
-        {
-            var server1 = CreateServer(o =>
-            {
-                o.Cookie.Name = "TestCookie";
-                o.Cookie.Path = "/foo";
-                o.Cookie.Domain = "another.com";
-                o.Cookie.SecurePolicy = CookieSecurePolicy.Always;
-                o.Cookie.SameSite = SameSiteMode.None;
-                o.Cookie.HttpOnly = true;
-            }, SignInAsAlice, baseAddress: new Uri("http://example.com/base"));
-
-            var transaction1 = await SendAsync(server1, "http://example.com/base/testpath");
-
-            var setCookie1 = transaction1.SetCookie;
-
-            Assert.Contains("TestCookie=", setCookie1);
-            Assert.Contains(" path=/foo", setCookie1);
-            Assert.Contains(" domain=another.com", setCookie1);
-            Assert.Contains(" secure", setCookie1);
-            Assert.DoesNotContain(" samesite", setCookie1);
-            Assert.Contains(" httponly", setCookie1);
-
-            var server2 = CreateServer(o =>
-            {
-                o.Cookie.Name = "SecondCookie";
-                o.Cookie.SecurePolicy = CookieSecurePolicy.None;
-                o.Cookie.SameSite = SameSiteMode.Strict;
-                o.Cookie.HttpOnly = false;
-            }, SignInAsAlice, baseAddress: new Uri("http://example.com/base"));
-
-            var transaction2 = await SendAsync(server2, "http://example.com/base/testpath");
-
-            var setCookie2 = transaction2.SetCookie;
-
-            Assert.Contains("SecondCookie=", setCookie2);
-            Assert.Contains(" path=/base", setCookie2);
-            Assert.Contains(" samesite=strict", setCookie2);
-            Assert.DoesNotContain(" domain=", setCookie2);
-            Assert.DoesNotContain(" secure", setCookie2);
-            Assert.DoesNotContain(" httponly", setCookie2);
-        }
-
-        [Fact]
-        public async Task CookieContainsIdentity()
-        {
-            var server = CreateServer(o => { }, SignInAsAlice);
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieAppliesClaimsTransform()
-        {
-            var server = CreateServer(o => { },
-            SignInAsAlice,
-            baseAddress: null,
-            claimsTransform: true);
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-            Assert.Equal("yup", FindClaimValue(transaction2, "xform"));
-            Assert.Null(FindClaimValue(transaction2, "sync"));
-        }
-
-        [Fact]
-        public async Task CookieStopsWorkingAfterExpiration()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = false;
-            }, SignInAsAlice);
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-
-            _clock.Add(TimeSpan.FromMinutes(7));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-
-            _clock.Add(TimeSpan.FromMinutes(7));
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-
-            Assert.Null(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-            Assert.Null(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-            Assert.Null(transaction4.SetCookie);
-            Assert.Null(FindClaimValue(transaction4, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieExpirationCanBeOverridenInSignin()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = false;
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies"))),
-                    new AuthenticationProperties() { ExpiresUtc = _clock.UtcNow.Add(TimeSpan.FromMinutes(5)) }));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-
-            _clock.Add(TimeSpan.FromMinutes(3));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-
-            _clock.Add(TimeSpan.FromMinutes(3));
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-
-            Assert.Null(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-            Assert.Null(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-            Assert.Null(transaction4.SetCookie);
-            Assert.Null(FindClaimValue(transaction4, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task ExpiredCookieWithValidatorStillExpired()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        ctx.ShouldRenew = true;
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            _clock.Add(TimeSpan.FromMinutes(11));
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction2.SetCookie);
-            Assert.Null(FindClaimValue(transaction2, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieCanBeRejectedAndSignedOutByValidator()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = false;
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        ctx.RejectPrincipal();
-                        ctx.HttpContext.SignOutAsync("Cookies");
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Contains(".AspNetCore.Cookies=; expires=", transaction2.SetCookie);
-            Assert.Null(FindClaimValue(transaction2, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieNotRenewedAfterSignOut()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = false;
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        ctx.ShouldRenew = true;
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            // renews on every request
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            var transaction3 = await server.SendAsync("http://example.com/normal", transaction1.CookieNameValue);
-            Assert.NotNull(transaction3.SetCookie[0]);
-
-            // signout wins over renew
-            var transaction4 = await server.SendAsync("http://example.com/signout", transaction3.SetCookie[0]);
-            Assert.Single(transaction4.SetCookie);
-            Assert.Contains(".AspNetCore.Cookies=; expires=", transaction4.SetCookie[0]);
-        }
-
-        [Fact]
-        public async Task CookieCanBeRenewedByValidator()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = false;
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        ctx.ShouldRenew = true;
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(5));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction2.CookieNameValue);
-            Assert.NotNull(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(6));
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction4.SetCookie);
-            Assert.Null(FindClaimValue(transaction4, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(5));
-
-            var transaction5 = await SendAsync(server, "http://example.com/me/Cookies", transaction2.CookieNameValue);
-            Assert.Null(transaction5.SetCookie);
-            Assert.Null(FindClaimValue(transaction5, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieCanBeReplacedByValidator()
-        {
-            var server = CreateServer(o =>
-            {
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        ctx.ShouldRenew = true;
-                        ctx.ReplacePrincipal(new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice2", "Cookies2"))));
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction2.SetCookie);
-            Assert.Equal("Alice2", FindClaimValue(transaction2, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieCanBeUpdatedByValidatorDuringRefresh()
-        {
-            var replace = false;
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        if (replace)
-                        {
-                            ctx.ShouldRenew = true;
-                            ctx.ReplacePrincipal(new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice2", "Cookies2"))));
-                            ctx.Properties.Items["updated"] = "yes";
-                        }
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-            Assert.Null(FindPropertiesValue(transaction3, "updated"));
-
-            replace = true;
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction4.SetCookie);
-            Assert.Equal("Alice2", FindClaimValue(transaction4, ClaimTypes.Name));
-            Assert.Equal("yes", FindPropertiesValue(transaction4, "updated"));
-
-            replace = false;
-
-            var transaction5 = await SendAsync(server, "http://example.com/me/Cookies", transaction4.CookieNameValue);
-            Assert.Equal("Alice2", FindClaimValue(transaction5, ClaimTypes.Name));
-            Assert.Equal("yes", FindPropertiesValue(transaction4, "updated"));
-        }
-
-        [Fact]
-        public async Task CookieCanBeRenewedByValidatorWithSlidingExpiry()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        ctx.ShouldRenew = true;
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(5));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction2.CookieNameValue);
-            Assert.NotNull(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(6));
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction3.CookieNameValue);
-            Assert.NotNull(transaction4.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction4, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(11));
-
-            var transaction5 = await SendAsync(server, "http://example.com/me/Cookies", transaction4.CookieNameValue);
-            Assert.Null(transaction5.SetCookie);
-            Assert.Null(FindClaimValue(transaction5, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieCanBeRenewedByValidatorWithModifiedProperties()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        ctx.ShouldRenew = true;
-                        var id = ctx.Principal.Identities.First();
-                        var claim = id.FindFirst("counter");
-                        if (claim == null)
-                        {
-                            id.AddClaim(new Claim("counter", "1"));
-                        }
-                        else
-                        {
-                            id.RemoveClaim(claim);
-                            id.AddClaim(new Claim("counter", claim.Value + "1"));
-                        }
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction2.SetCookie);
-            Assert.Equal("1", FindClaimValue(transaction2, "counter"));
-
-            _clock.Add(TimeSpan.FromMinutes(5));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction2.CookieNameValue);
-            Assert.NotNull(transaction3.SetCookie);
-            Assert.Equal("11", FindClaimValue(transaction3, "counter"));
-
-            _clock.Add(TimeSpan.FromMinutes(6));
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction3.CookieNameValue);
-            Assert.NotNull(transaction4.SetCookie);
-            Assert.Equal("111", FindClaimValue(transaction4, "counter"));
-
-            _clock.Add(TimeSpan.FromMinutes(11));
-
-            var transaction5 = await SendAsync(server, "http://example.com/me/Cookies", transaction4.CookieNameValue);
-            Assert.Null(transaction5.SetCookie);
-            Assert.Null(FindClaimValue(transaction5, "counter"));
-        }
-
-        [Fact]
-        public async Task CookieValidatorOnlyCalledOnce()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = false;
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        ctx.ShouldRenew = true;
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(5));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction2.CookieNameValue);
-            Assert.NotNull(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(6));
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction4.SetCookie);
-            Assert.Null(FindClaimValue(transaction4, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(5));
-
-            var transaction5 = await SendAsync(server, "http://example.com/me/Cookies", transaction2.CookieNameValue);
-            Assert.Null(transaction5.SetCookie);
-            Assert.Null(FindClaimValue(transaction5, ClaimTypes.Name));
-        }
-
-        [Theory]
-        [InlineData(true)]
-        [InlineData(false)]
-        public async Task ShouldRenewUpdatesIssuedExpiredUtc(bool sliding)
-        {
-            DateTimeOffset? lastValidateIssuedDate = null;
-            DateTimeOffset? lastExpiresDate = null;
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = sliding;
-                o.Events = new CookieAuthenticationEvents
-                {
-                    OnValidatePrincipal = ctx =>
-                    {
-                        lastValidateIssuedDate = ctx.Properties.IssuedUtc;
-                        lastExpiresDate = ctx.Properties.ExpiresUtc;
-                        ctx.ShouldRenew = true;
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            context =>
-                context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies")))));
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            Assert.NotNull(lastValidateIssuedDate);
-            Assert.NotNull(lastExpiresDate);
-
-            var firstIssueDate = lastValidateIssuedDate;
-            var firstExpiresDate = lastExpiresDate;
-
-            _clock.Add(TimeSpan.FromMinutes(1));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction2.CookieNameValue);
-            Assert.NotNull(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(2));
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction3.CookieNameValue);
-            Assert.NotNull(transaction4.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction4, ClaimTypes.Name));
-
-            Assert.NotEqual(lastValidateIssuedDate, firstIssueDate);
-            Assert.NotEqual(firstExpiresDate, lastExpiresDate);
-        }
-
-        [Fact]
-        public async Task CookieExpirationCanBeOverridenInEvent()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = false;
-                o.Events = new CookieAuthenticationEvents()
-                {
-                    OnSigningIn = context =>
-                    {
-                        context.Properties.ExpiresUtc = _clock.UtcNow.Add(TimeSpan.FromMinutes(5));
-                        return Task.FromResult(0);
-                    }
-                };
-            },
-            SignInAsAlice);
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(3));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(3));
-
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction4.SetCookie);
-            Assert.Null(FindClaimValue(transaction4, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieIsRenewedWithSlidingExpiration()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = true;
-            },
-            SignInAsAlice);
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(4));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(4));
-
-            // transaction4 should arrive with a new SetCookie value
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction4.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction4, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(4));
-
-            var transaction5 = await SendAsync(server, "http://example.com/me/Cookies", transaction4.CookieNameValue);
-            Assert.Null(transaction5.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction5, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieIsRenewedWithSlidingExpirationWithoutTransformations()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ExpireTimeSpan = TimeSpan.FromMinutes(10);
-                o.SlidingExpiration = true;
-                o.Events.OnValidatePrincipal = c =>
-                {
-                    // https://github.com/aspnet/Security/issues/1607
-                    // On sliding refresh the transformed principal should not be serialized into the cookie, only the original principal.
-                    Assert.Single(c.Principal.Identities);
-                    Assert.True(c.Principal.Identities.First().HasClaim("marker", "true"));
-                    return Task.CompletedTask;
-                };
-            },
-            SignInAsAlice,
-            claimsTransform: true);
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction2.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(4));
-
-            var transaction3 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.Null(transaction3.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction3, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(4));
-
-            // transaction4 should arrive with a new SetCookie value
-            var transaction4 = await SendAsync(server, "http://example.com/me/Cookies", transaction1.CookieNameValue);
-            Assert.NotNull(transaction4.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction4, ClaimTypes.Name));
-
-            _clock.Add(TimeSpan.FromMinutes(4));
-
-            var transaction5 = await SendAsync(server, "http://example.com/me/Cookies", transaction4.CookieNameValue);
-            Assert.Null(transaction5.SetCookie);
-            Assert.Equal("Alice", FindClaimValue(transaction5, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task CookieUsesPathBaseByDefault()
-        {
-            var server = CreateServer(o => { },
-            context =>
-            {
-                Assert.Equal(new PathString("/base"), context.Request.PathBase);
-                return context.SignInAsync("Cookies",
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies"))));
-            },
-            new Uri("http://example.com/base"));
-
-            var transaction1 = await SendAsync(server, "http://example.com/base/testpath");
-            Assert.Contains("path=/base", transaction1.SetCookie);
-        }
-
-        [Fact]
-        public async Task CookieChallengeRedirectsToLoginWithoutCookie()
-        {
-            var server = CreateServer(o => { }, SignInAsAlice);
-
-            var url = "http://example.com/challenge";
-            var transaction = await SendAsync(server, url);
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location;
-            Assert.Equal("/Account/Login", location.LocalPath);
-        }
-
-        [Fact]
-        public async Task CookieForbidRedirectsWithoutCookie()
-        {
-            var server = CreateServer(o => { }, SignInAsAlice);
-
-            var url = "http://example.com/forbid";
-            var transaction = await SendAsync(server, url);
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location;
-            Assert.Equal("/Account/AccessDenied", location.LocalPath);
-        }
-
-        [Fact]
-        public async Task CookieChallengeRedirectsWithLoginPath()
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = new PathString("/page");
-            });
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/challenge", transaction1.CookieNameValue);
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction2.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task CookieChallengeWithUnauthorizedRedirectsToLoginIfNotAuthenticated()
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = new PathString("/page");
-            });
-
-            var transaction1 = await SendAsync(server, "http://example.com/testpath");
-
-            var transaction2 = await SendAsync(server, "http://example.com/unauthorized", transaction1.CookieNameValue);
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction2.Response.StatusCode);
-        }
-
-        [Theory]
-        [InlineData(true)]
-        [InlineData(false)]
-        public async Task MapWillAffectChallengeOnlyWithUseAuth(bool useAuth)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    if (useAuth)
-                    {
-                        app.UseAuthentication();
-                    }
-                    app.Map("/login", signoutApp => signoutApp.Run(context => context.ChallengeAsync("Cookies", new AuthenticationProperties() { RedirectUri = "/" })));
-                })
-                .ConfigureServices(s => s.AddAuthentication().AddCookie(o => o.LoginPath = new PathString("/page")));
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/login");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            var location = transaction.Response.Headers.Location;
-            if (useAuth)
-            {
-                Assert.Equal("/page", location.LocalPath);
-            }
-            else
-            {
-                Assert.Equal("/login/page", location.LocalPath);
-            }
-            Assert.Equal("?ReturnUrl=%2F", location.Query);
-        }
-
-        [ConditionalFact(Skip = "Revisit, exception no longer thrown")]
-        public async Task ChallengeDoesNotSet401OnUnauthorized()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(async context =>
-                    {
-                        await Assert.ThrowsAsync<InvalidOperationException>(() => context.ChallengeAsync(CookieAuthenticationDefaults.AuthenticationScheme));
-                    });
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie());
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task CanConfigureDefaultCookieInstance()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(context => context.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme, new ClaimsPrincipal(new ClaimsIdentity())));
-                })
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication().AddCookie();
-                    services.Configure<CookieAuthenticationOptions>(CookieAuthenticationDefaults.AuthenticationScheme,
-                        o => o.Cookie.Name = "One");
-                });
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com");
-
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.StartsWith("One=", transaction.SetCookie[0]);
-        }
-
-        [Fact]
-        public async Task CanConfigureNamedCookieInstance()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(context => context.SignInAsync("Cookie1", new ClaimsPrincipal(new ClaimsIdentity())));
-                })
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication().AddCookie("Cookie1");
-                    services.Configure<CookieAuthenticationOptions>("Cookie1",
-                        o => o.Cookie.Name = "One");
-                });
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com");
-
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.StartsWith("One=", transaction.SetCookie[0]);
-        }
-
-        [Fact]
-        public async Task MapWithSignInOnlyRedirectToReturnUrlOnLoginPath()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Map("/notlogin", signoutApp => signoutApp.Run(context => context.SignInAsync("Cookies",
-                        new ClaimsPrincipal())));
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.LoginPath = new PathString("/login")));
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/notlogin?ReturnUrl=%2Fpage");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.NotNull(transaction.SetCookie);
-        }
-
-        [Fact]
-        public async Task MapWillNotAffectSignInRedirectToReturnUrl()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Map("/login", signoutApp => signoutApp.Run(context => context.SignInAsync("Cookies", new ClaimsPrincipal())));
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.LoginPath = new PathString("/login")));
-
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/login?ReturnUrl=%2Fpage");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.NotNull(transaction.SetCookie);
-
-            var location = transaction.Response.Headers.Location;
-            Assert.Equal("/page", location.OriginalString);
-        }
-
-        [Fact]
-        public async Task MapWithSignOutOnlyRedirectToReturnUrlOnLogoutPath()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Map("/notlogout", signoutApp => signoutApp.Run(context => context.SignOutAsync("Cookies")));
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.LogoutPath = new PathString("/logout")));
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/notlogout?ReturnUrl=%2Fpage");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.Contains(".AspNetCore.Cookies=; expires=", transaction.SetCookie[0]);
-        }
-
-        [Fact]
-        public async Task MapWillNotAffectSignOutRedirectToReturnUrl()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Map("/logout", signoutApp => signoutApp.Run(context => context.SignOutAsync("Cookies")));
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.LogoutPath = new PathString("/logout")));
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/logout?ReturnUrl=%2Fpage");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Contains(".AspNetCore.Cookies=; expires=", transaction.SetCookie[0]);
-
-            var location = transaction.Response.Headers.Location;
-            Assert.Equal("/page", location.OriginalString);
-        }
-
-        [Fact]
-        public async Task MapWillNotAffectAccessDenied()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Map("/forbid", signoutApp => signoutApp.Run(context => context.ForbidAsync("Cookies")));
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.AccessDeniedPath = new PathString("/denied")));
-            var server = new TestServer(builder);
-            var transaction = await server.SendAsync("http://example.com/forbid");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            var location = transaction.Response.Headers.Location;
-            Assert.Equal("/denied", location.LocalPath);
-        }
-
-        [Fact]
-        public async Task NestedMapWillNotAffectLogin()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                    app.Map("/base", map =>
-                    {
-                        map.UseAuthentication();
-                        map.Map("/login", signoutApp => signoutApp.Run(context => context.ChallengeAsync("Cookies", new AuthenticationProperties() { RedirectUri = "/" })));
-                    }))
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.LoginPath = new PathString("/page")));
-            var server = new TestServer(builder);
-            var transaction = await server.SendAsync("http://example.com/base/login");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            var location = transaction.Response.Headers.Location;
-            Assert.Equal("/base/page", location.LocalPath);
-            Assert.Equal("?ReturnUrl=%2F", location.Query);
-        }
-
-        [Theory]
-        [InlineData("/redirect_test")]
-        [InlineData("http://example.com/redirect_to")]
-        public async Task RedirectUriIsHoneredAfterSignin(string redirectUrl)
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = "/testpath";
-                o.Cookie.Name = "TestCookie";
-            },
-            async context =>
-                await context.SignInAsync(
-                    CookieAuthenticationDefaults.AuthenticationScheme,
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", CookieAuthenticationDefaults.AuthenticationScheme))),
-                    new AuthenticationProperties { RedirectUri = redirectUrl })
-            );
-            var transaction = await SendAsync(server, "http://example.com/testpath");
-
-            Assert.NotEmpty(transaction.SetCookie);
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal(redirectUrl, transaction.Response.Headers.Location.ToString());
-        }
-
-        [Fact]
-        public async Task RedirectUriInQueryIsHoneredAfterSignin()
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = "/testpath";
-                o.ReturnUrlParameter = "return";
-                o.Cookie.Name = "TestCookie";
-            },
-            async context =>
-            {
-                await context.SignInAsync(
-                    CookieAuthenticationDefaults.AuthenticationScheme,
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", CookieAuthenticationDefaults.AuthenticationScheme))));
-            });
-            var transaction = await SendAsync(server, "http://example.com/testpath?return=%2Fret_path_2");
-
-            Assert.NotEmpty(transaction.SetCookie);
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/ret_path_2", transaction.Response.Headers.Location.ToString());
-        }
-
-        [Fact]
-        public async Task AbsoluteRedirectUriInQueryStringIsRejected()
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = "/testpath";
-                o.ReturnUrlParameter = "return";
-                o.Cookie.Name = "TestCookie";
-            },
-            async context =>
-            {
-                await context.SignInAsync(
-                    CookieAuthenticationDefaults.AuthenticationScheme,
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", CookieAuthenticationDefaults.AuthenticationScheme))));
-            });
-            var transaction = await SendAsync(server, "http://example.com/testpath?return=http%3A%2F%2Fexample.com%2Fredirect_to");
-
-            Assert.NotEmpty(transaction.SetCookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task EnsurePrecedenceOfRedirectUriAfterSignin()
-        {
-            var server = CreateServer(o =>
-            {
-                o.LoginPath = "/testpath";
-                o.ReturnUrlParameter = "return";
-                o.Cookie.Name = "TestCookie";
-            },
-            async context =>
-            {
-                await context.SignInAsync(
-                    CookieAuthenticationDefaults.AuthenticationScheme,
-                    new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", CookieAuthenticationDefaults.AuthenticationScheme))),
-                    new AuthenticationProperties { RedirectUri = "/redirect_test" });
-            });
-            var transaction = await SendAsync(server, "http://example.com/testpath?return=%2Fret_path_2");
-
-            Assert.NotEmpty(transaction.SetCookie);
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/redirect_test", transaction.Response.Headers.Location.ToString());
-        }
-
-        [Fact]
-        public async Task NestedMapWillNotAffectAccessDenied()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                    app.Map("/base", map =>
-                    {
-                        map.UseAuthentication();
-                        map.Map("/forbid", signoutApp => signoutApp.Run(context => context.ForbidAsync("Cookies")));
-                    }))
-                    .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.AccessDeniedPath = new PathString("/denied")));
-            var server = new TestServer(builder);
-            var transaction = await server.SendAsync("http://example.com/base/forbid");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            var location = transaction.Response.Headers.Location;
-            Assert.Equal("/base/denied", location.LocalPath);
-        }
-
-        [Fact]
-        public async Task CanSpecifyAndShareDataProtector()
-        {
-
-            var dp = new NoOpDataProtector();
-            var builder1 = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use((context, next) =>
-                        context.SignInAsync("Cookies",
-                                        new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies"))),
-                                        new AuthenticationProperties()));
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o =>
-                {
-                    o.TicketDataFormat = new TicketDataFormat(dp);
-                    o.Cookie.Name = "Cookie";
-                }));
-            var server1 = new TestServer(builder1);
-
-            var transaction = await SendAsync(server1, "http://example.com/stuff");
-            Assert.NotNull(transaction.SetCookie);
-
-            var builder2 = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        var result = await context.AuthenticateAsync("Cookies");
-                        Describe(context.Response, result);
-                    });
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie("Cookies", o =>
-                {
-                    o.Cookie.Name = "Cookie";
-                    o.TicketDataFormat = new TicketDataFormat(dp);
-                }));
-            var server2 = new TestServer(builder2);
-            var transaction2 = await SendAsync(server2, "http://example.com/stuff", transaction.CookieNameValue);
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-        }
-
-        // Issue: https://github.com/aspnet/Security/issues/949
-        [Fact]
-        public async Task NullExpiresUtcPropertyIsGuarded()
-        {
-            var builder = new WebHostBuilder()
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o =>
-                {
-                    o.Events = new CookieAuthenticationEvents
-                    {
-                        OnValidatePrincipal = context =>
-                        {
-                            context.Properties.ExpiresUtc = null;
-                            context.ShouldRenew = true;
-                            return Task.FromResult(0);
-                        }
-                    };
-                }))
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-
-                    app.Run(async context =>
-                    {
-                        if (context.Request.Path == "/signin")
-                        {
-                            await context.SignInAsync(
-                                CookieAuthenticationDefaults.AuthenticationScheme,
-                                new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("Alice", "Cookies"))));
-                        }
-                        else
-                        {
-                            await context.Response.WriteAsync("ha+1");
-                        }
-                    });
-                });
-
-            var server = new TestServer(builder);
-
-            var cookie = (await server.SendAsync("http://www.example.com/signin")).SetCookie.FirstOrDefault();
-            Assert.NotNull(cookie);
-
-            var transaction = await server.SendAsync("http://www.example.com/", cookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        private class NoOpDataProtector : IDataProtector
-        {
-            public IDataProtector CreateProtector(string purpose)
-            {
-                return this;
-            }
-
-            public byte[] Protect(byte[] plaintext)
-            {
-                return plaintext;
-            }
-
-            public byte[] Unprotect(byte[] protectedData)
-            {
-                return protectedData;
-            }
-        }
-
-        private static string FindClaimValue(Transaction transaction, string claimType)
-        {
-            var claim = transaction.ResponseElement.Elements("claim").SingleOrDefault(elt => elt.Attribute("type").Value == claimType);
-            if (claim == null)
-            {
-                return null;
-            }
-            return claim.Attribute("value").Value;
-        }
-
-        private static string FindPropertiesValue(Transaction transaction, string key)
-        {
-            var property = transaction.ResponseElement.Elements("extra").SingleOrDefault(elt => elt.Attribute("type").Value == key);
-            if (property == null)
-            {
-                return null;
-            }
-            return property.Attribute("value").Value;
-        }
-
-        private static async Task<XElement> GetAuthData(TestServer server, string url, string cookie)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, url);
-            request.Headers.Add("Cookie", cookie);
-
-            var response2 = await server.CreateClient().SendAsync(request);
-            var text = await response2.Content.ReadAsStringAsync();
-            var me = XElement.Parse(text);
-            return me;
-        }
-
-        private class ClaimsTransformer : IClaimsTransformation
-        {
-            public Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal p)
-            {
-                var firstId = p.Identities.First();
-                if (firstId.HasClaim("marker", "true"))
-                {
-                    firstId.RemoveClaim(firstId.FindFirst("marker"));
-                }
-                // TransformAsync could be called twice on one request if you have a default scheme and also
-                // call AuthenticateAsync.
-                if (!p.Identities.Any(i => i.AuthenticationType == "xform"))
-                {
-                    var id = new ClaimsIdentity("xform");
-                    id.AddClaim(new Claim("xform", "yup"));
-                    p.AddIdentity(id);
-                }
-                return Task.FromResult(p);
-            }
-        }
-
-        private TestServer CreateServer(Action<CookieAuthenticationOptions> configureOptions, Func<HttpContext, Task> testpath = null, Uri baseAddress = null, bool claimsTransform = false)
-            => CreateServerWithServices(s =>
-            {
-                s.AddSingleton<ISystemClock>(_clock);
-                s.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme).AddCookie(configureOptions);
-                if (claimsTransform)
-                {
-                    s.AddSingleton<IClaimsTransformation, ClaimsTransformer>();
-                }
-            }, testpath, baseAddress);
-
-        private static TestServer CreateServerWithServices(Action<IServiceCollection> configureServices, Func<HttpContext, Task> testpath = null, Uri baseAddress = null)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        var req = context.Request;
-                        var res = context.Response;
-                        PathString remainder;
-                        if (req.Path == new PathString("/normal"))
-                        {
-                            res.StatusCode = 200;
-                        }
-                        else if (req.Path == new PathString("/forbid")) // Simulate forbidden 
-                        {
-                            await context.ForbidAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                        }
-                        else if (req.Path == new PathString("/challenge"))
-                        {
-                            await context.ChallengeAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                        }
-                        else if (req.Path == new PathString("/signout"))
-                        {
-                            await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                        }
-                        else if (req.Path == new PathString("/unauthorized"))
-                        {
-                            await context.ChallengeAsync(CookieAuthenticationDefaults.AuthenticationScheme, new AuthenticationProperties());
-                        }
-                        else if (req.Path == new PathString("/protected/CustomRedirect"))
-                        {
-                            await context.ChallengeAsync(CookieAuthenticationDefaults.AuthenticationScheme, new AuthenticationProperties() { RedirectUri = "/CustomRedirect" });
-                        }
-                        else if (req.Path == new PathString("/me"))
-                        {
-                            Describe(res, AuthenticateResult.Success(new AuthenticationTicket(context.User, new AuthenticationProperties(), CookieAuthenticationDefaults.AuthenticationScheme)));
-                        }
-                        else if (req.Path.StartsWithSegments(new PathString("/me"), out remainder))
-                        {
-                            var ticket = await context.AuthenticateAsync(remainder.Value.Substring(1));
-                            Describe(res, ticket);
-                        }
-                        else if (req.Path == new PathString("/testpath") && testpath != null)
-                        {
-                            await testpath(context);
-                        }
-                        else if (req.Path == new PathString("/checkforerrors"))
-                        {
-                            var result = await context.AuthenticateAsync(CookieAuthenticationDefaults.AuthenticationScheme); // this used to be "Automatic"
-                            if (result.Failure != null)
-                            {
-                                throw new Exception("Failed to authenticate", result.Failure);
-                            }
-                            return;
-                        }
-                        else
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(configureServices);
-            var server = new TestServer(builder);
-            server.BaseAddress = baseAddress;
-            return server;
-        }
-
-        private static void Describe(HttpResponse res, AuthenticateResult result)
-        {
-            res.StatusCode = 200;
-            res.ContentType = "text/xml";
-            var xml = new XElement("xml");
-            if (result?.Ticket?.Principal != null)
-            {
-                xml.Add(result.Ticket.Principal.Claims.Select(claim => new XElement("claim", new XAttribute("type", claim.Type), new XAttribute("value", claim.Value))));
-            }
-            if (result?.Ticket?.Properties != null)
-            {
-                xml.Add(result.Ticket.Properties.Items.Select(extra => new XElement("extra", new XAttribute("type", extra.Key), new XAttribute("value", extra.Value))));
-            }
-            var xmlBytes = Encoding.UTF8.GetBytes(xml.ToString());
-            res.Body.Write(xmlBytes, 0, xmlBytes.Length);
-        }
-
-        private static async Task<Transaction> SendAsync(TestServer server, string uri, string cookieHeader = null)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, uri);
-            if (!string.IsNullOrEmpty(cookieHeader))
-            {
-                request.Headers.Add("Cookie", cookieHeader);
-            }
-            var transaction = new Transaction
-            {
-                Request = request,
-                Response = await server.CreateClient().SendAsync(request),
-            };
-            if (transaction.Response.Headers.Contains("Set-Cookie"))
-            {
-                transaction.SetCookie = transaction.Response.Headers.GetValues("Set-Cookie").SingleOrDefault();
-            }
-            if (!string.IsNullOrEmpty(transaction.SetCookie))
-            {
-                transaction.CookieNameValue = transaction.SetCookie.Split(new[] { ';' }, 2).First();
-            }
-            transaction.ResponseText = await transaction.Response.Content.ReadAsStringAsync();
-
-            if (transaction.Response.Content != null &&
-                transaction.Response.Content.Headers.ContentType != null &&
-                transaction.Response.Content.Headers.ContentType.MediaType == "text/xml")
-            {
-                transaction.ResponseElement = XElement.Parse(transaction.ResponseText);
-            }
-            return transaction;
-        }
-
-        private class Transaction
-        {
-            public HttpRequestMessage Request { get; set; }
-            public HttpResponseMessage Response { get; set; }
-
-            public string SetCookie { get; set; }
-            public string CookieNameValue { get; set; }
-
-            public string ResponseText { get; set; }
-            public XElement ResponseElement { get; set; }
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/DynamicSchemeTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/DynamicSchemeTests.cs
deleted file mode 100644
index d658609b0..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/DynamicSchemeTests.cs
+++ /dev/null
@@ -1,170 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved. See License.txt in the project root for license information.
-
-using System;
-using System.Net;
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class DynamicSchemeTests
-    {
-        [Fact]
-        public async Task OptionsAreConfiguredOnce()
-        {
-            var server = CreateServer(s =>
-            {
-                s.Configure<TestOptions>("One", o => o.Instance = new Singleton());
-                s.Configure<TestOptions>("Two", o => o.Instance = new Singleton());
-            });
-            // Add One scheme
-            var response = await server.CreateClient().GetAsync("http://example.com/add/One");
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            var transaction = await server.SendAsync("http://example.com/auth/One");
-            Assert.Equal("One", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "One"));
-            Assert.Equal("1", transaction.FindClaimValue("Count"));
-
-            // Verify option is not recreated
-            transaction = await server.SendAsync("http://example.com/auth/One");
-            Assert.Equal("One", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "One"));
-            Assert.Equal("1", transaction.FindClaimValue("Count"));
-
-            // Add Two scheme
-            response = await server.CreateClient().GetAsync("http://example.com/add/Two");
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            transaction = await server.SendAsync("http://example.com/auth/Two");
-            Assert.Equal("Two", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "Two"));
-            Assert.Equal("2", transaction.FindClaimValue("Count"));
-
-            // Verify options are not recreated
-            transaction = await server.SendAsync("http://example.com/auth/One");
-            Assert.Equal("One", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "One"));
-            Assert.Equal("1", transaction.FindClaimValue("Count"));
-            transaction = await server.SendAsync("http://example.com/auth/Two");
-            Assert.Equal("Two", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "Two"));
-            Assert.Equal("2", transaction.FindClaimValue("Count"));
-        }
-
-        [Fact]
-        public async Task CanAddAndRemoveSchemes()
-        {
-            var server = CreateServer();
-            await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync("http://example.com/auth/One"));
-
-            // Add One scheme
-            var response = await server.CreateClient().GetAsync("http://example.com/add/One");
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            var transaction = await server.SendAsync("http://example.com/auth/One");
-            Assert.Equal("One", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "One"));
-
-            // Add Two scheme
-            response = await server.CreateClient().GetAsync("http://example.com/add/Two");
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            transaction = await server.SendAsync("http://example.com/auth/Two");
-            Assert.Equal("Two", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "Two"));
-
-            // Remove Two
-            response = await server.CreateClient().GetAsync("http://example.com/remove/Two");
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync("http://example.com/auth/Two"));
-            transaction = await server.SendAsync("http://example.com/auth/One");
-            Assert.Equal("One", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "One"));
-
-            // Remove One
-            response = await server.CreateClient().GetAsync("http://example.com/remove/One");
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync("http://example.com/auth/Two"));
-            await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync("http://example.com/auth/One"));
-        }
-
-        public class TestOptions : AuthenticationSchemeOptions
-        {
-            public Singleton Instance { get; set; }
-        }
-
-        public class Singleton
-        {
-            public static int _count;
-
-            public Singleton()
-            {
-                _count++;
-                Count = _count;
-            }
-
-            public int Count { get; }
-        }
-
-        private class TestHandler : AuthenticationHandler<TestOptions>
-        {
-            public TestHandler(IOptionsMonitor<TestOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) : base(options, logger, encoder, clock)
-            {
-            }
-
-            protected override Task<AuthenticateResult> HandleAuthenticateAsync()
-            {
-                var principal = new ClaimsPrincipal();
-                var id = new ClaimsIdentity();
-                id.AddClaim(new Claim(ClaimTypes.NameIdentifier, Scheme.Name, ClaimValueTypes.String, Scheme.Name));
-                if (Options.Instance != null)
-                {
-                    id.AddClaim(new Claim("Count", Options.Instance.Count.ToString()));
-                }
-                principal.AddIdentity(id);
-                return Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(principal, new AuthenticationProperties(), Scheme.Name)));
-            }
-        }
-
-        private static TestServer CreateServer(Action<IServiceCollection> configureServices = null)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        var req = context.Request;
-                        var res = context.Response;
-                        if (req.Path.StartsWithSegments(new PathString("/add"), out var remainder))
-                        {
-                            var name = remainder.Value.Substring(1);
-                            var auth = context.RequestServices.GetRequiredService<IAuthenticationSchemeProvider>();
-                            var scheme = new AuthenticationScheme(name, name, typeof(TestHandler));
-                            auth.AddScheme(scheme);
-                        }
-                        else if (req.Path.StartsWithSegments(new PathString("/auth"), out remainder))
-                        {
-                            var name = (remainder.Value.Length > 0) ? remainder.Value.Substring(1) : null;
-                            var result = await context.AuthenticateAsync(name);
-                            res.Describe(result?.Ticket?.Principal);
-                        }
-                        else if (req.Path.StartsWithSegments(new PathString("/remove"), out remainder))
-                        {
-                            var name = remainder.Value.Substring(1);
-                            var auth = context.RequestServices.GetRequiredService<IAuthenticationSchemeProvider>();
-                            auth.RemoveScheme(name);
-                        }
-                        else
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(services =>
-                {
-                    configureServices?.Invoke(services);
-                    services.AddAuthentication();
-                });
-            return new TestServer(builder);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/FacebookTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/FacebookTests.cs
deleted file mode 100644
index 964af2ce7..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/FacebookTests.cs
+++ /dev/null
@@ -1,389 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging.Abstractions;
-using Newtonsoft.Json;
-using System;
-using System.Linq;
-using System.Net;
-using System.Net.Http;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Facebook
-{
-    public class FacebookTests : RemoteAuthenticationTests<FacebookOptions>
-    {
-        protected override string DefaultScheme => FacebookDefaults.AuthenticationScheme;
-        protected override Type HandlerType => typeof(FacebookHandler);
-        protected override bool SupportsSignIn { get => false; }
-        protected override bool SupportsSignOut { get => false; }
-
-        protected override void RegisterAuth(AuthenticationBuilder services, Action<FacebookOptions> configure)
-        {
-            services.AddFacebook(o =>
-            {
-                ConfigureDefaults(o);
-                configure.Invoke(o);
-            });
-        }
- 
-        protected override void ConfigureDefaults(FacebookOptions o)
-        {
-            o.AppId = "whatever";
-            o.AppSecret = "whatever";
-            o.SignInScheme = "auth1";
-        }
-
-        [Fact]
-        public async Task ThrowsIfAppIdMissing()
-        {
-            var server = CreateServer(
-                app => { },
-                services => services.AddAuthentication().AddFacebook(o => o.SignInScheme = "Whatever"),
-                async context =>
-                {
-                    await Assert.ThrowsAsync<ArgumentException>("AppId", () => context.ChallengeAsync("Facebook"));
-                    return true;
-                });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ThrowsIfAppSecretMissing()
-        {
-            var server = CreateServer(
-                app => { },
-                services => services.AddAuthentication().AddFacebook(o => o.AppId = "Whatever"),
-                async context =>
-                {
-                    await Assert.ThrowsAsync<ArgumentException>("AppSecret", () => context.ChallengeAsync("Facebook"));
-                    return true;
-                });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ChallengeWillTriggerApplyRedirectEvent()
-        {
-            var server = CreateServer(
-                app =>
-                {
-                    app.UseAuthentication();
-                },
-                services =>
-                {
-                    services.AddAuthentication("External")
-                        .AddCookie("External", o => { })
-                        .AddFacebook(o =>
-                    {
-                        o.AppId = "Test App Id";
-                        o.AppSecret = "Test App Secret";
-                        o.Events = new OAuthEvents
-                        {
-                            OnRedirectToAuthorizationEndpoint = context =>
-                            {
-                                context.Response.Redirect(context.RedirectUri + "&custom=test");
-                                return Task.FromResult(0);
-                            }
-                        };
-                    });
-                },
-                async context =>
-                {
-                    await context.ChallengeAsync("Facebook");
-                    return true;
-                });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var query = transaction.Response.Headers.Location.Query;
-            Assert.Contains("custom=test", query);
-        }
-
-        [Fact]
-        public async Task ChallengeWillIncludeScopeAsConfigured()
-        {
-            var server = CreateServer(
-                app => app.UseAuthentication(),
-                services =>
-                {
-                    services.AddAuthentication().AddFacebook(o =>
-                    {
-                        o.AppId = "Test App Id";
-                        o.AppSecret = "Test App Secret";
-                        o.Scope.Clear();
-                        o.Scope.Add("foo");
-                        o.Scope.Add("bar");
-                    });
-                },
-                async context =>
-                {
-                    await context.ChallengeAsync(FacebookDefaults.AuthenticationScheme);
-                    return true;
-                });
-
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=foo,bar", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task ChallengeWillIncludeScopeAsOverwritten()
-        {
-            var server = CreateServer(
-                app => app.UseAuthentication(),
-                services =>
-                {
-                    services.AddAuthentication().AddFacebook(o =>
-                    {
-                        o.AppId = "Test App Id";
-                        o.AppSecret = "Test App Secret";
-                        o.Scope.Clear();
-                        o.Scope.Add("foo");
-                        o.Scope.Add("bar");
-                    });
-                },
-                async context =>
-                {
-                    var properties = new OAuthChallengeProperties();
-                    properties.SetScope("baz", "qux");
-                    await context.ChallengeAsync(FacebookDefaults.AuthenticationScheme, properties);
-                    return true;
-                });
-
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=baz,qux", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task ChallengeWillIncludeScopeAsOverwrittenWithBaseAuthenticationProperties()
-        {
-            var server = CreateServer(
-                app => app.UseAuthentication(),
-                services =>
-                {
-                    services.AddAuthentication().AddFacebook(o =>
-                    {
-                        o.AppId = "Test App Id";
-                        o.AppSecret = "Test App Secret";
-                        o.Scope.Clear();
-                        o.Scope.Add("foo");
-                        o.Scope.Add("bar");
-                    });
-                },
-                async context =>
-                {
-                    var properties = new AuthenticationProperties();
-                    properties.SetParameter(OAuthChallengeProperties.ScopeKey, new string[] { "baz", "qux" });
-                    await context.ChallengeAsync(FacebookDefaults.AuthenticationScheme, properties);
-                    return true;
-                });
-
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=baz,qux", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task NestedMapWillNotAffectRedirect()
-        {
-            var server = CreateServer(app => app.Map("/base", map =>
-            {
-                map.UseAuthentication();
-                map.Map("/login", signoutApp => signoutApp.Run(context => context.ChallengeAsync("Facebook", new AuthenticationProperties() { RedirectUri = "/" })));
-            }),
-            services =>
-            {
-                services.AddAuthentication()
-                    .AddCookie("External", o => { })
-                    .AddFacebook(o =>
-                {
-                    o.AppId = "Test App Id";
-                    o.AppSecret = "Test App Secret";
-                });
-            },
-            handler: null);
-
-            var transaction = await server.SendAsync("http://example.com/base/login");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.AbsoluteUri;
-            Assert.Contains("https://www.facebook.com/v3.1/dialog/oauth", location);
-            Assert.Contains("response_type=code", location);
-            Assert.Contains("client_id=", location);
-            Assert.Contains("redirect_uri=" + UrlEncoder.Default.Encode("http://example.com/base/signin-facebook"), location);
-            Assert.Contains("scope=", location);
-            Assert.Contains("state=", location);
-        }
-
-        [Fact]
-        public async Task MapWillNotAffectRedirect()
-        {
-            var server = CreateServer(
-                app =>
-                {
-                    app.UseAuthentication();
-                    app.Map("/login", signoutApp => signoutApp.Run(context => context.ChallengeAsync("Facebook", new AuthenticationProperties() { RedirectUri = "/" })));
-                },
-                services =>
-                {
-                    services.AddAuthentication()
-                        .AddCookie("External", o => { })
-                        .AddFacebook(o =>
-                    {
-                        o.AppId = "Test App Id";
-                        o.AppSecret = "Test App Secret";
-                        o.SignInScheme = "External";
-                    });
-                },
-                handler: null);
-            var transaction = await server.SendAsync("http://example.com/login");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.AbsoluteUri;
-            Assert.Contains("https://www.facebook.com/v3.1/dialog/oauth", location);
-            Assert.Contains("response_type=code", location);
-            Assert.Contains("client_id=", location);
-            Assert.Contains("redirect_uri=" + UrlEncoder.Default.Encode("http://example.com/signin-facebook"), location);
-            Assert.Contains("scope=", location);
-            Assert.Contains("state=", location);
-        }
-
-        [Fact]
-        public async Task ChallengeWillTriggerRedirection()
-        {
-            var server = CreateServer(
-                app => app.UseAuthentication(),
-                services =>
-                {
-                    services.AddAuthentication(options =>
-                    {
-                        options.DefaultSignInScheme = "External";
-                    })
-                        .AddCookie()
-                        .AddFacebook(o =>
-                    {
-                        o.AppId = "Test App Id";
-                        o.AppSecret = "Test App Secret";
-                    });
-                },
-                async context =>
-                {
-                    await context.ChallengeAsync("Facebook");
-                    return true;
-                });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.AbsoluteUri;
-            Assert.Contains("https://www.facebook.com/v3.1/dialog/oauth", location);
-            Assert.Contains("response_type=code", location);
-            Assert.Contains("client_id=", location);
-            Assert.Contains("redirect_uri=", location);
-            Assert.Contains("scope=", location);
-            Assert.Contains("state=", location);
-        }
-
-        [Fact]
-        public async Task CustomUserInfoEndpointHasValidGraphQuery()
-        {
-            var customUserInfoEndpoint = "https://graph.facebook.com/me?fields=email,timezone,picture";
-            var finalUserInfoEndpoint = string.Empty;
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("FacebookTest"));
-            var server = CreateServer(
-                app => app.UseAuthentication(),
-                services =>
-                {
-                    services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
-                        .AddCookie()
-                        .AddFacebook(o =>
-                    {
-                        o.AppId = "Test App Id";
-                        o.AppSecret = "Test App Secret";
-                        o.StateDataFormat = stateFormat;
-                        o.UserInformationEndpoint = customUserInfoEndpoint;
-                        o.BackchannelHttpHandler = new TestHttpMessageHandler
-                        {
-                            Sender = req =>
-                            {
-                                if (req.RequestUri.GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped) == FacebookDefaults.TokenEndpoint)
-                                {
-                                    var res = new HttpResponseMessage(HttpStatusCode.OK);
-                                    var graphResponse = JsonConvert.SerializeObject(new
-                                    {
-                                        access_token = "TestAuthToken"
-                                    });
-                                    res.Content = new StringContent(graphResponse, Encoding.UTF8);
-                                    return res;
-                                }
-                                if (req.RequestUri.GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped) ==
-                                    new Uri(customUserInfoEndpoint).GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped))
-                                {
-                                    finalUserInfoEndpoint = req.RequestUri.ToString();
-                                    var res = new HttpResponseMessage(HttpStatusCode.OK);
-                                    var graphResponse = JsonConvert.SerializeObject(new
-                                    {
-                                        id = "TestProfileId",
-                                        name = "TestName"
-                                    });
-                                    res.Content = new StringContent(graphResponse, Encoding.UTF8);
-                                    return res;
-                                }
-                                return null;
-                            }
-                        };
-                    });
-                },
-                handler: null);
-
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-facebook?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Facebook.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/me", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(1, finalUserInfoEndpoint.Count(c => c == '?'));
-            Assert.Contains("fields=email,timezone,picture", finalUserInfoEndpoint);
-            Assert.Contains("&access_token=", finalUserInfoEndpoint);
-        }
-
-        private static TestServer CreateServer(Action<IApplicationBuilder> configure, Action<IServiceCollection> configureServices, Func<HttpContext, Task<bool>> handler)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    configure?.Invoke(app);
-                    app.Use(async (context, next) =>
-                    {
-                        if (handler == null || !await handler(context))
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(configureServices);
-            return new TestServer(builder);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/GoogleTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/GoogleTests.cs
deleted file mode 100644
index ce158eaf2..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/GoogleTests.cs
+++ /dev/null
@@ -1,1285 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.AspNetCore.WebUtilities;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging.Abstractions;
-using Newtonsoft.Json;
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Net;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Google
-{
-    public class GoogleTests : RemoteAuthenticationTests<GoogleOptions>
-    {
-        protected override string DefaultScheme => GoogleDefaults.AuthenticationScheme;
-        protected override Type HandlerType => typeof(GoogleHandler);
-        protected override bool SupportsSignIn { get => false; }
-        protected override bool SupportsSignOut { get => false; }
-
-        protected override void RegisterAuth(AuthenticationBuilder services, Action<GoogleOptions> configure)
-        {
-            services.AddGoogle(o =>
-            {
-                ConfigureDefaults(o);
-                configure.Invoke(o);
-            });
-        }
-
-        protected override void ConfigureDefaults(GoogleOptions o)
-        {
-            o.ClientId = "whatever";
-            o.ClientSecret = "whatever";
-            o.SignInScheme = "auth1";
-        }
-
-        [Fact]
-        public async Task ChallengeWillTriggerRedirection()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.ToString();
-            Assert.Contains("https://accounts.google.com/o/oauth2/v2/auth?response_type=code", location);
-            Assert.Contains("&client_id=", location);
-            Assert.Contains("&redirect_uri=", location);
-            Assert.Contains("&scope=", location);
-            Assert.Contains("&state=", location);
-
-            Assert.DoesNotContain("access_type=", location);
-            Assert.DoesNotContain("prompt=", location);
-            Assert.DoesNotContain("approval_prompt=", location);
-            Assert.DoesNotContain("login_hint=", location);
-            Assert.DoesNotContain("include_granted_scopes=", location);
-        }
-
-        [Fact]
-        public async Task SignInThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signIn");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task SignOutThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signOut");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ForbidThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signOut");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task Challenge401WillNotTriggerRedirection()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/401");
-            Assert.Equal(HttpStatusCode.Unauthorized, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ChallengeWillSetCorrelationCookie()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/challenge");
-            Assert.Contains(transaction.SetCookie, cookie => cookie.StartsWith(".AspNetCore.Correlation.Google."));
-        }
-
-        [Fact]
-        public async Task ChallengeWillSetDefaultScope()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var query = transaction.Response.Headers.Location.Query;
-            Assert.Contains("&scope=" + UrlEncoder.Default.Encode("openid profile email"), query);
-        }
-
-        [Fact]
-        public async Task ChallengeWillUseAuthenticationPropertiesParametersAsQueryArguments()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-            },
-            context =>
-            {
-                var req = context.Request;
-                var res = context.Response;
-                if (req.Path == new PathString("/challenge2"))
-                {
-                    return context.ChallengeAsync("Google", new GoogleChallengeProperties
-                    {
-                        Scope = new string[] { "openid", "https://www.googleapis.com/auth/plus.login" },
-                        AccessType = "offline",
-                        ApprovalPrompt = "force",
-                        Prompt = "consent",
-                        LoginHint = "test@example.com",
-                        IncludeGrantedScopes = false,
-                    });
-                }
-
-                return Task.FromResult<object>(null);
-            });
-            var transaction = await server.SendAsync("https://example.com/challenge2");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            // verify query arguments
-            var query = QueryHelpers.ParseQuery(transaction.Response.Headers.Location.Query);
-            Assert.Equal("openid https://www.googleapis.com/auth/plus.login", query["scope"]);
-            Assert.Equal("offline", query["access_type"]);
-            Assert.Equal("force", query["approval_prompt"]);
-            Assert.Equal("consent", query["prompt"]);
-            Assert.Equal("false", query["include_granted_scopes"]);
-            Assert.Equal("test@example.com", query["login_hint"]);
-
-            // verify that the passed items were not serialized
-            var stateProperties = stateFormat.Unprotect(query["state"]);
-            Assert.DoesNotContain("scope", stateProperties.Items.Keys);
-            Assert.DoesNotContain("access_type", stateProperties.Items.Keys);
-            Assert.DoesNotContain("include_granted_scopes", stateProperties.Items.Keys);
-            Assert.DoesNotContain("approval_prompt", stateProperties.Items.Keys);
-            Assert.DoesNotContain("prompt", stateProperties.Items.Keys);
-            Assert.DoesNotContain("login_hint", stateProperties.Items.Keys);
-        }
-
-        [Fact]
-        public async Task ChallengeWillUseAuthenticationPropertiesItemsAsParameters()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-            },
-            context =>
-            {
-                var req = context.Request;
-                var res = context.Response;
-                if (req.Path == new PathString("/challenge2"))
-                {
-                    return context.ChallengeAsync("Google", new AuthenticationProperties(new Dictionary<string, string>()
-                    {
-                        { "scope", "https://www.googleapis.com/auth/plus.login" },
-                        { "access_type", "offline" },
-                        { "approval_prompt", "force" },
-                        { "prompt", "consent" },
-                        { "login_hint", "test@example.com" },
-                        { "include_granted_scopes", "false" }
-                    }));
-                }
-
-                return Task.FromResult<object>(null);
-            });
-            var transaction = await server.SendAsync("https://example.com/challenge2");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            // verify query arguments
-            var query = QueryHelpers.ParseQuery(transaction.Response.Headers.Location.Query);
-            Assert.Equal("https://www.googleapis.com/auth/plus.login", query["scope"]);
-            Assert.Equal("offline", query["access_type"]);
-            Assert.Equal("force", query["approval_prompt"]);
-            Assert.Equal("consent", query["prompt"]);
-            Assert.Equal("false", query["include_granted_scopes"]);
-            Assert.Equal("test@example.com", query["login_hint"]);
-
-            // verify that the passed items were not serialized
-            var stateProperties = stateFormat.Unprotect(query["state"]);
-            Assert.DoesNotContain("scope", stateProperties.Items.Keys);
-            Assert.DoesNotContain("access_type", stateProperties.Items.Keys);
-            Assert.DoesNotContain("include_granted_scopes", stateProperties.Items.Keys);
-            Assert.DoesNotContain("approval_prompt", stateProperties.Items.Keys);
-            Assert.DoesNotContain("prompt", stateProperties.Items.Keys);
-            Assert.DoesNotContain("login_hint", stateProperties.Items.Keys);
-        }
-
-        [Fact]
-        public async Task ChallengeWillUseAuthenticationPropertiesItemsAsQueryArgumentsButParametersWillOverwrite()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-            },
-            context =>
-            {
-                var req = context.Request;
-                var res = context.Response;
-                if (req.Path == new PathString("/challenge2"))
-                {
-                    return context.ChallengeAsync("Google", new GoogleChallengeProperties(new Dictionary<string, string>
-                    {
-                        ["scope"] = "https://www.googleapis.com/auth/plus.login",
-                        ["access_type"] = "offline",
-                        ["include_granted_scopes"] = "false",
-                        ["approval_prompt"] = "force",
-                        ["prompt"] = "login",
-                        ["login_hint"] = "this-will-be-overwritten@example.com",
-                    })
-                    {
-                        Prompt = "consent",
-                        LoginHint = "test@example.com",
-                    });
-                }
-
-                return Task.FromResult<object>(null);
-            });
-            var transaction = await server.SendAsync("https://example.com/challenge2");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            // verify query arguments
-            var query = QueryHelpers.ParseQuery(transaction.Response.Headers.Location.Query);
-            Assert.Equal("https://www.googleapis.com/auth/plus.login", query["scope"]);
-            Assert.Equal("offline", query["access_type"]);
-            Assert.Equal("force", query["approval_prompt"]);
-            Assert.Equal("consent", query["prompt"]);
-            Assert.Equal("false", query["include_granted_scopes"]);
-            Assert.Equal("test@example.com", query["login_hint"]);
-
-            // verify that the passed items were not serialized
-            var stateProperties = stateFormat.Unprotect(query["state"]);
-            Assert.DoesNotContain("scope", stateProperties.Items.Keys);
-            Assert.DoesNotContain("access_type", stateProperties.Items.Keys);
-            Assert.DoesNotContain("include_granted_scopes", stateProperties.Items.Keys);
-            Assert.DoesNotContain("approval_prompt", stateProperties.Items.Keys);
-            Assert.DoesNotContain("prompt", stateProperties.Items.Keys);
-            Assert.DoesNotContain("login_hint", stateProperties.Items.Keys);
-        }
-
-        [Fact]
-        public async Task ChallengeWillTriggerApplyRedirectEvent()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.Events = new OAuthEvents
-                {
-                    OnRedirectToAuthorizationEndpoint = context =>
-                    {
-                        context.Response.Redirect(context.RedirectUri + "&custom=test");
-                        return Task.FromResult(0);
-                    }
-                };
-            });
-            var transaction = await server.SendAsync("https://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var query = transaction.Response.Headers.Location.Query;
-            Assert.Contains("custom=test", query);
-        }
-
-        [Fact]
-        public async Task AuthenticateWithoutCookieWillFail()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            },
-            async context =>
-            {
-                var req = context.Request;
-                var res = context.Response;
-                if (req.Path == new PathString("/auth"))
-                {
-                    var result = await context.AuthenticateAsync("Google");
-                    Assert.NotNull(result.Failure);
-                }
-            });
-            var transaction = await server.SendAsync("https://example.com/auth");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ReplyPathWithoutStateQueryStringWillBeRejected()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var error = await Assert.ThrowsAnyAsync<Exception>(() => server.SendAsync("https://example.com/signin-google?code=TestCode"));
-            Assert.Equal("The oauth state was missing or invalid.", error.GetBaseException().Message);
-        }
-
-        [Theory]
-        [InlineData(true)]
-        [InlineData(false)]
-        public async Task ReplyPathWithAccessDeniedErrorFails(bool redirect)
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = new TestStateDataFormat();
-                o.Events = redirect ? new OAuthEvents()
-                {
-                    OnAccessDenied = ctx =>
-                    {
-                        ctx.Response.Redirect("/error?FailureMessage=AccessDenied");
-                        ctx.HandleResponse();
-                        return Task.FromResult(0);
-                    }
-                } : new OAuthEvents();
-            });
-            var sendTask = server.SendAsync("https://example.com/signin-google?error=access_denied&error_description=SoBad&error_uri=foobar&state=protected_state",
-                ".AspNetCore.Correlation.Google.correlationId=N");
-            if (redirect)
-            {
-                var transaction = await sendTask;
-                Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-                Assert.Equal("/error?FailureMessage=AccessDenied", transaction.Response.Headers.GetValues("Location").First());
-            }
-            else
-            {
-                var error = await Assert.ThrowsAnyAsync<Exception>(() => sendTask);
-                Assert.Equal("Access was denied by the resource owner or by the remote server.", error.GetBaseException().Message);
-            }
-        }
-
-        [Fact]
-        public async Task ReplyPathWithAccessDeniedError_AllowsCustomizingPath()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = new TestStateDataFormat();
-                o.AccessDeniedPath = "/access-denied";
-                o.Events = new OAuthEvents()
-                {
-                    OnAccessDenied = ctx =>
-                    {
-                        Assert.Equal("/access-denied", ctx.AccessDeniedPath.Value);
-                        Assert.Equal("http://testhost/redirect", ctx.ReturnUrl);
-                        Assert.Equal("ReturnUrl", ctx.ReturnUrlParameter);
-                        ctx.AccessDeniedPath = "/custom-denied-page";
-                        ctx.ReturnUrl = "http://www.google.com/";
-                        ctx.ReturnUrlParameter = "rurl";
-                        return Task.FromResult(0);
-                    }
-                };
-            });
-            var transaction = await server.SendAsync("https://example.com/signin-google?error=access_denied&error_description=SoBad&error_uri=foobar&state=protected_state",
-                ".AspNetCore.Correlation.Google.correlationId=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/custom-denied-page?rurl=http%3A%2F%2Fwww.google.com%2F", transaction.Response.Headers.GetValues("Location").First());
-        }
-
-        [Theory]
-        [InlineData(true)]
-        [InlineData(false)]
-        public async Task ReplyPathWithErrorFails(bool redirect)
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = new TestStateDataFormat();
-                o.Events = redirect ? new OAuthEvents()
-                {
-                    OnRemoteFailure = ctx =>
-                    {
-                        ctx.Response.Redirect("/error?FailureMessage=" + UrlEncoder.Default.Encode(ctx.Failure.Message));
-                        ctx.HandleResponse();
-                        return Task.FromResult(0);
-                    }
-                } : new OAuthEvents();
-            });
-            var sendTask = server.SendAsync("https://example.com/signin-google?error=OMG&error_description=SoBad&error_uri=foobar&state=protected_state",
-                ".AspNetCore.Correlation.Google.correlationId=N");
-            if (redirect)
-            {
-                var transaction = await sendTask;
-                Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-                Assert.Equal("/error?FailureMessage=OMG" + UrlEncoder.Default.Encode(";Description=SoBad;Uri=foobar"), transaction.Response.Headers.GetValues("Location").First());
-            }
-            else
-            {
-                var error = await Assert.ThrowsAnyAsync<Exception>(() => sendTask);
-                Assert.Equal("OMG;Description=SoBad;Uri=foobar", error.GetBaseException().Message);
-            }
-        }
-
-        [Theory]
-        [InlineData(null)]
-        [InlineData("CustomIssuer")]
-        public async Task ReplyPathWillAuthenticateValidAuthorizeCodeAndState(string claimsIssuer)
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.SaveTokens = true;
-                o.StateDataFormat = stateFormat;
-                if (claimsIssuer != null)
-                {
-                    o.ClaimsIssuer = claimsIssuer;
-                }
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = req =>
-                    {
-                        if (req.RequestUri.AbsoluteUri == "https://www.googleapis.com/oauth2/v4/token")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                access_token = "Test Access Token",
-                                expires_in = 3600,
-                                token_type = "Bearer"
-                            });
-                        }
-                        else if (req.RequestUri.GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped) == "https://www.googleapis.com/plus/v1/people/me")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                id = "Test User ID",
-                                displayName = "Test Name",
-                                name = new
-                                {
-                                    familyName = "Test Family Name",
-                                    givenName = "Test Given Name"
-                                },
-                                url = "Profile link",
-                                emails = new[]
-                                {
-                                    new
-                                    {
-                                        value = "Test email",
-                                        type = "account"
-                                    }
-                                }
-                            });
-                        }
-
-                        throw new NotImplementedException(req.RequestUri.AbsoluteUri);
-                    }
-                };
-            });
-
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/me", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(2, transaction.SetCookie.Count);
-            Assert.Contains($".AspNetCore.Correlation.Google.{correlationValue}", transaction.SetCookie[0]);
-            Assert.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme, transaction.SetCookie[1]);
-
-            var authCookie = transaction.AuthenticationCookieValue;
-            transaction = await server.SendAsync("https://example.com/me", authCookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            var expectedIssuer = claimsIssuer ?? GoogleDefaults.AuthenticationScheme;
-            Assert.Equal("Test Name", transaction.FindClaimValue(ClaimTypes.Name, expectedIssuer));
-            Assert.Equal("Test User ID", transaction.FindClaimValue(ClaimTypes.NameIdentifier, expectedIssuer));
-            Assert.Equal("Test Given Name", transaction.FindClaimValue(ClaimTypes.GivenName, expectedIssuer));
-            Assert.Equal("Test Family Name", transaction.FindClaimValue(ClaimTypes.Surname, expectedIssuer));
-            Assert.Equal("Test email", transaction.FindClaimValue(ClaimTypes.Email, expectedIssuer));
-
-            // Ensure claims transformation
-            Assert.Equal("yup", transaction.FindClaimValue("xform"));
-
-            transaction = await server.SendAsync("https://example.com/tokens", authCookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.Equal("Test Access Token", transaction.FindTokenValue("access_token"));
-            Assert.Equal("Bearer", transaction.FindTokenValue("token_type"));
-            Assert.NotNull(transaction.FindTokenValue("expires_at"));
-        }
-
-        // REVIEW: Fix this once we revisit error handling to not blow up
-        [Theory]
-        [InlineData(true)]
-        [InlineData(false)]
-        public async Task ReplyPathWillThrowIfCodeIsInvalid(bool redirect)
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = req =>
-                    {
-                        return ReturnJsonResponse(new { Error = "Error" },
-                            HttpStatusCode.BadRequest);
-                    }
-                };
-                o.Events = redirect ? new OAuthEvents()
-                {
-                    OnRemoteFailure = ctx =>
-                    {
-                        ctx.Response.Redirect("/error?FailureMessage=" + UrlEncoder.Default.Encode(ctx.Failure.Message));
-                        ctx.HandleResponse();
-                        return Task.FromResult(0);
-                    }
-                } : new OAuthEvents();
-            });
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-
-            var state = stateFormat.Protect(properties);
-            var sendTask = server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            if (redirect)
-            {
-                var transaction = await sendTask;
-                Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-                Assert.Equal("/error?FailureMessage=" + UrlEncoder.Default.Encode("OAuth token endpoint failure: Status: BadRequest;Headers: ;Body: {\"Error\":\"Error\"};"),
-                    transaction.Response.Headers.GetValues("Location").First());
-            }
-            else
-            {
-                var error = await Assert.ThrowsAnyAsync<Exception>(() => sendTask);
-                Assert.Equal("OAuth token endpoint failure: Status: BadRequest;Headers: ;Body: {\"Error\":\"Error\"};", error.GetBaseException().Message);
-            }
-        }
-
-        [Theory]
-        [InlineData(true)]
-        [InlineData(false)]
-        public async Task ReplyPathWillRejectIfAccessTokenIsMissing(bool redirect)
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = req =>
-                    {
-                        return ReturnJsonResponse(new object());
-                    }
-                };
-                o.Events = redirect ? new OAuthEvents()
-                {
-                    OnRemoteFailure = ctx =>
-                    {
-                        ctx.Response.Redirect("/error?FailureMessage=" + UrlEncoder.Default.Encode(ctx.Failure.Message));
-                        ctx.HandleResponse();
-                        return Task.FromResult(0);
-                    }
-                } : new OAuthEvents();
-            });
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var sendTask = server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            if (redirect)
-            {
-                var transaction = await sendTask;
-                Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-                Assert.Equal("/error?FailureMessage=" + UrlEncoder.Default.Encode("Failed to retrieve access token."),
-                    transaction.Response.Headers.GetValues("Location").First());
-            }
-            else
-            {
-                var error = await Assert.ThrowsAnyAsync<Exception>(() => sendTask);
-                Assert.Equal("Failed to retrieve access token.", error.GetBaseException().Message);
-            }
-        }
-
-        [Fact]
-        public async Task AuthenticatedEventCanGetRefreshToken()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = req =>
-                    {
-                        if (req.RequestUri.AbsoluteUri == "https://www.googleapis.com/oauth2/v4/token")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                access_token = "Test Access Token",
-                                expires_in = 3600,
-                                token_type = "Bearer",
-                                refresh_token = "Test Refresh Token"
-                            });
-                        }
-                        else if (req.RequestUri.GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped) == "https://www.googleapis.com/plus/v1/people/me")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                id = "Test User ID",
-                                displayName = "Test Name",
-                                name = new
-                                {
-                                    familyName = "Test Family Name",
-                                    givenName = "Test Given Name"
-                                },
-                                url = "Profile link",
-                                emails = new[]
-                                    {
-                                        new
-                                        {
-                                            value = "Test email",
-                                            type = "account"
-                                        }
-                                    }
-                            });
-                        }
-
-                        throw new NotImplementedException(req.RequestUri.AbsoluteUri);
-                    }
-                };
-                o.Events = new OAuthEvents
-                {
-                    OnCreatingTicket = context =>
-                    {
-                        var refreshToken = context.RefreshToken;
-                        context.Principal.AddIdentity(new ClaimsIdentity(new Claim[] { new Claim("RefreshToken", refreshToken, ClaimValueTypes.String, "Google") }, "Google"));
-                        return Task.FromResult(0);
-                    }
-                };
-            });
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/me", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(2, transaction.SetCookie.Count);
-            Assert.Contains($".AspNetCore.Correlation.Google.{correlationValue}", transaction.SetCookie[0]);
-            Assert.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme, transaction.SetCookie[1]);
-
-            var authCookie = transaction.AuthenticationCookieValue;
-            transaction = await server.SendAsync("https://example.com/me", authCookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.Equal("Test Refresh Token", transaction.FindClaimValue("RefreshToken"));
-        }
-
-        [Fact]
-        public async Task NullRedirectUriWillRedirectToSlash()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = req =>
-                    {
-                        if (req.RequestUri.AbsoluteUri == "https://www.googleapis.com/oauth2/v4/token")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                access_token = "Test Access Token",
-                                expires_in = 3600,
-                                token_type = "Bearer",
-                                refresh_token = "Test Refresh Token"
-                            });
-                        }
-                        else if (req.RequestUri.GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped) == "https://www.googleapis.com/plus/v1/people/me")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                id = "Test User ID",
-                                displayName = "Test Name",
-                                name = new
-                                {
-                                    familyName = "Test Family Name",
-                                    givenName = "Test Given Name"
-                                },
-                                url = "Profile link",
-                                emails = new[]
-                                    {
-                                        new
-                                        {
-                                            value = "Test email",
-                                            type = "account"
-                                        }
-                                    }
-                            });
-                        }
-
-                        throw new NotImplementedException(req.RequestUri.AbsoluteUri);
-                    }
-                };
-                o.Events = new OAuthEvents
-                {
-                    OnTicketReceived = context =>
-                    {
-                        context.Properties.RedirectUri = null;
-                        return Task.FromResult(0);
-                    }
-                };
-            });
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(2, transaction.SetCookie.Count);
-            Assert.Contains($".AspNetCore.Correlation.Google.{correlationValue}", transaction.SetCookie[0]);
-            Assert.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme, transaction.SetCookie[1]);
-        }
-
-        [Fact]
-        public async Task ValidateAuthenticatedContext()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.AccessType = "offline";
-                o.Events = new OAuthEvents()
-                {
-                    OnCreatingTicket = context =>
-                    {
-                        Assert.NotNull(context.User);
-                        Assert.Equal("Test Access Token", context.AccessToken);
-                        Assert.Equal("Test Refresh Token", context.RefreshToken);
-                        Assert.Equal(TimeSpan.FromSeconds(3600), context.ExpiresIn);
-                        Assert.Equal("Test email", context.Identity.FindFirst(ClaimTypes.Email)?.Value);
-                        Assert.Equal("Test User ID", context.Identity.FindFirst(ClaimTypes.NameIdentifier)?.Value);
-                        Assert.Equal("Test Name", context.Identity.FindFirst(ClaimTypes.Name)?.Value);
-                        Assert.Equal("Test Family Name", context.Identity.FindFirst(ClaimTypes.Surname)?.Value);
-                        Assert.Equal("Test Given Name", context.Identity.FindFirst(ClaimTypes.GivenName)?.Value);
-                        return Task.FromResult(0);
-                    }
-                };
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = req =>
-                    {
-                        if (req.RequestUri.AbsoluteUri == "https://www.googleapis.com/oauth2/v4/token")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                access_token = "Test Access Token",
-                                expires_in = 3600,
-                                token_type = "Bearer",
-                                refresh_token = "Test Refresh Token"
-                            });
-                        }
-                        else if (req.RequestUri.GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped) == "https://www.googleapis.com/plus/v1/people/me")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                id = "Test User ID",
-                                displayName = "Test Name",
-                                name = new
-                                {
-                                    familyName = "Test Family Name",
-                                    givenName = "Test Given Name"
-                                },
-                                url = "Profile link",
-                                emails = new[]
-                                    {
-                                        new
-                                        {
-                                            value = "Test email",
-                                            type = "account"
-                                        }
-                                    }
-                            });
-                        }
-
-                        throw new NotImplementedException(req.RequestUri.AbsoluteUri);
-                    }
-                };
-            });
-
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/foo";
-            var state = stateFormat.Protect(properties);
-
-            //Post a message to the Google middleware
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/foo", transaction.Response.Headers.GetValues("Location").First());
-        }
-
-        [Fact]
-        public async Task NoStateCausesException()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-
-            //Post a message to the Google middleware
-            var error = await Assert.ThrowsAnyAsync<Exception>(() => server.SendAsync("https://example.com/signin-google?code=TestCode"));
-            Assert.Equal("The oauth state was missing or invalid.", error.GetBaseException().Message);
-        }
-
-        [Fact]
-        public async Task CanRedirectOnError()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.Events = new OAuthEvents()
-                {
-                    OnRemoteFailure = ctx =>
-                    {
-                        ctx.Response.Redirect("/error?FailureMessage=" + UrlEncoder.Default.Encode(ctx.Failure.Message));
-                        ctx.HandleResponse();
-                        return Task.FromResult(0);
-                    }
-                };
-            });
-
-            //Post a message to the Google middleware
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/error?FailureMessage=" + UrlEncoder.Default.Encode("The oauth state was missing or invalid."),
-                transaction.Response.Headers.GetValues("Location").First());
-        }
-
-        [Fact]
-        public async Task AuthenticateAutomaticWhenAlreadySignedInSucceeds()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.SaveTokens = true;
-                o.BackchannelHttpHandler = CreateBackchannel();
-            });
-
-            // Skip the challenge step, go directly to the callback path
-
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/me", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(2, transaction.SetCookie.Count);
-            Assert.Contains($".AspNetCore.Correlation.Google.{correlationValue}", transaction.SetCookie[0]); // Delete
-            Assert.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme, transaction.SetCookie[1]);
-
-            var authCookie = transaction.AuthenticationCookieValue;
-            transaction = await server.SendAsync("https://example.com/authenticate", authCookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.Equal("Test Name", transaction.FindClaimValue(ClaimTypes.Name));
-            Assert.Equal("Test User ID", transaction.FindClaimValue(ClaimTypes.NameIdentifier));
-            Assert.Equal("Test Given Name", transaction.FindClaimValue(ClaimTypes.GivenName));
-            Assert.Equal("Test Family Name", transaction.FindClaimValue(ClaimTypes.Surname));
-            Assert.Equal("Test email", transaction.FindClaimValue(ClaimTypes.Email));
-
-            // Ensure claims transformation
-            Assert.Equal("yup", transaction.FindClaimValue("xform"));
-        }
-
-        [Fact]
-        public async Task AuthenticateGoogleWhenAlreadySignedInSucceeds()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.SaveTokens = true;
-                o.BackchannelHttpHandler = CreateBackchannel();
-            });
-
-            // Skip the challenge step, go directly to the callback path
-
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/me", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(2, transaction.SetCookie.Count);
-            Assert.Contains($".AspNetCore.Correlation.Google.{correlationValue}", transaction.SetCookie[0]); // Delete
-            Assert.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme, transaction.SetCookie[1]);
-
-            var authCookie = transaction.AuthenticationCookieValue;
-            transaction = await server.SendAsync("https://example.com/authenticateGoogle", authCookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.Equal("Test Name", transaction.FindClaimValue(ClaimTypes.Name));
-            Assert.Equal("Test User ID", transaction.FindClaimValue(ClaimTypes.NameIdentifier));
-            Assert.Equal("Test Given Name", transaction.FindClaimValue(ClaimTypes.GivenName));
-            Assert.Equal("Test Family Name", transaction.FindClaimValue(ClaimTypes.Surname));
-            Assert.Equal("Test email", transaction.FindClaimValue(ClaimTypes.Email));
-
-            // Ensure claims transformation
-            Assert.Equal("yup", transaction.FindClaimValue("xform"));
-        }
-
-        [Fact]
-        public async Task AuthenticateFacebookWhenAlreadySignedWithGoogleReturnsNull()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.SaveTokens = true;
-                o.BackchannelHttpHandler = CreateBackchannel();
-            });
-
-            // Skip the challenge step, go directly to the callback path
-
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/me", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(2, transaction.SetCookie.Count);
-            Assert.Contains($".AspNetCore.Correlation.Google.{correlationValue}", transaction.SetCookie[0]); // Delete
-            Assert.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme, transaction.SetCookie[1]);
-
-            var authCookie = transaction.AuthenticationCookieValue;
-            transaction = await server.SendAsync("https://example.com/authenticateFacebook", authCookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.Null(transaction.FindClaimValue(ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task ChallengeFacebookWhenAlreadySignedWithGoogleSucceeds()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("GoogleTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.StateDataFormat = stateFormat;
-                o.SaveTokens = true;
-                o.BackchannelHttpHandler = CreateBackchannel();
-            });
-
-            // Skip the challenge step, go directly to the callback path
-
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-google?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Google.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/me", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(2, transaction.SetCookie.Count);
-            Assert.Contains($".AspNetCore.Correlation.Google.{correlationValue}", transaction.SetCookie[0]); // Delete
-            Assert.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme, transaction.SetCookie[1]);
-
-            var authCookie = transaction.AuthenticationCookieValue;
-            transaction = await server.SendAsync("https://example.com/challengeFacebook", authCookie);
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.StartsWith("https://www.facebook.com/", transaction.Response.Headers.Location.OriginalString);
-        }
-
-        private HttpMessageHandler CreateBackchannel()
-        {
-            return new TestHttpMessageHandler()
-            {
-                Sender = req =>
-                {
-                    if (req.RequestUri.AbsoluteUri == "https://www.googleapis.com/oauth2/v4/token")
-                    {
-                        return ReturnJsonResponse(new
-                        {
-                            access_token = "Test Access Token",
-                            expires_in = 3600,
-                            token_type = "Bearer"
-                        });
-                    }
-                    else if (req.RequestUri.GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped) == "https://www.googleapis.com/plus/v1/people/me")
-                    {
-                        return ReturnJsonResponse(new
-                        {
-                            id = "Test User ID",
-                            displayName = "Test Name",
-                            name = new
-                            {
-                                familyName = "Test Family Name",
-                                givenName = "Test Given Name"
-                            },
-                            url = "Profile link",
-                            emails = new[]
-                            {
-                                new
-                                {
-                                    value = "Test email",
-                                    type = "account"
-                                }
-                            }
-                        });
-                    }
-
-                    throw new NotImplementedException(req.RequestUri.AbsoluteUri);
-                }
-            };
-        }
-
-        private static HttpResponseMessage ReturnJsonResponse(object content, HttpStatusCode code = HttpStatusCode.OK)
-        {
-            var res = new HttpResponseMessage(code);
-            var text = JsonConvert.SerializeObject(content);
-            res.Content = new StringContent(text, Encoding.UTF8, "application/json");
-            return res;
-        }
-
-        private class ClaimsTransformer : IClaimsTransformation
-        {
-            public Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal p)
-            {
-                if (!p.Identities.Any(i => i.AuthenticationType == "xform"))
-                {
-                    var id = new ClaimsIdentity("xform");
-                    id.AddClaim(new Claim("xform", "yup"));
-                    p.AddIdentity(id);
-                }
-                return Task.FromResult(p);
-            }
-        }
-
-        private static TestServer CreateServer(Action<GoogleOptions> configureOptions, Func<HttpContext, Task> testpath = null)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        var req = context.Request;
-                        var res = context.Response;
-                        if (req.Path == new PathString("/challenge"))
-                        {
-                            await context.ChallengeAsync();
-                        }
-                        else if (req.Path == new PathString("/challengeFacebook"))
-                        {
-                            await context.ChallengeAsync("Facebook");
-                        }
-                        else if (req.Path == new PathString("/tokens"))
-                        {
-                            var result = await context.AuthenticateAsync(TestExtensions.CookieAuthenticationScheme);
-                            var tokens = result.Properties.GetTokens();
-                            res.Describe(tokens);
-                        }
-                        else if (req.Path == new PathString("/me"))
-                        {
-                            res.Describe(context.User);
-                        }
-                        else if (req.Path == new PathString("/authenticate"))
-                        {
-                            var result = await context.AuthenticateAsync(TestExtensions.CookieAuthenticationScheme);
-                            res.Describe(result.Principal);
-                        }
-                        else if (req.Path == new PathString("/authenticateGoogle"))
-                        {
-                            var result = await context.AuthenticateAsync("Google");
-                            res.Describe(result?.Principal);
-                        }
-                        else if (req.Path == new PathString("/authenticateFacebook"))
-                        {
-                            var result = await context.AuthenticateAsync("Facebook");
-                            res.Describe(result?.Principal);
-                        }
-                        else if (req.Path == new PathString("/unauthorized"))
-                        {
-                            // Simulate Authorization failure
-                            var result = await context.AuthenticateAsync("Google");
-                            await context.ChallengeAsync("Google");
-                        }
-                        else if (req.Path == new PathString("/unauthorizedAuto"))
-                        {
-                            var result = await context.AuthenticateAsync("Google");
-                            await context.ChallengeAsync("Google");
-                        }
-                        else if (req.Path == new PathString("/401"))
-                        {
-                            res.StatusCode = 401;
-                        }
-                        else if (req.Path == new PathString("/signIn"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync("Google", new ClaimsPrincipal()));
-                        }
-                        else if (req.Path == new PathString("/signOut"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignOutAsync("Google"));
-                        }
-                        else if (req.Path == new PathString("/forbid"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.ForbidAsync("Google"));
-                        }
-                        else if (testpath != null)
-                        {
-                            await testpath(context);
-                        }
-                        else
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(services =>
-                {
-                    services.AddTransient<IClaimsTransformation, ClaimsTransformer>();
-                    services.AddAuthentication(TestExtensions.CookieAuthenticationScheme)
-                        .AddCookie(TestExtensions.CookieAuthenticationScheme, o => o.ForwardChallenge = GoogleDefaults.AuthenticationScheme)
-                        .AddGoogle(configureOptions)
-                        .AddFacebook(o =>
-                        {
-                            o.ClientId = "Test ClientId";
-                            o.ClientSecret = "Test AppSecrent";
-                        });
-                });
-            return new TestServer(builder);
-        }
-
-        private class TestStateDataFormat : ISecureDataFormat<AuthenticationProperties>
-        {
-            private AuthenticationProperties Data { get; set; }
-
-            public string Protect(AuthenticationProperties data)
-            {
-                return "protected_state";
-            }
-
-            public string Protect(AuthenticationProperties data, string purpose)
-            {
-                throw new NotImplementedException();
-            }
-
-            public AuthenticationProperties Unprotect(string protectedText)
-            {
-                Assert.Equal("protected_state", protectedText);
-                var properties = new AuthenticationProperties(new Dictionary<string, string>()
-                {
-                    { ".xsrf", "correlationId" },
-                    { "testkey", "testvalue" }
-                });
-                properties.RedirectUri = "http://testhost/redirect";
-                return properties;
-            }
-
-            public AuthenticationProperties Unprotect(string protectedText, string purpose)
-            {
-                throw new NotImplementedException();
-            }
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/JwtBearerTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/JwtBearerTests.cs
deleted file mode 100644
index ad77803cd..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/JwtBearerTests.cs
+++ /dev/null
@@ -1,845 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.IdentityModel.Tokens;
-using System;
-using System.IdentityModel.Tokens.Jwt;
-using System.Linq;
-using System.Net;
-using System.Net.Http;
-using System.Reflection;
-using System.Security.Claims;
-using System.Text;
-using System.Threading.Tasks;
-using System.Xml.Linq;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.JwtBearer
-{
-    public class JwtBearerTests : SharedAuthenticationTests<JwtBearerOptions>
-    {
-        protected override string DefaultScheme => JwtBearerDefaults.AuthenticationScheme;
-        protected override Type HandlerType => typeof(JwtBearerHandler);
-        protected override bool SupportsSignIn { get => false; }
-        protected override bool SupportsSignOut { get => false; }
-
-        protected override void RegisterAuth(AuthenticationBuilder services, Action<JwtBearerOptions> configure)
-        {
-            services.AddJwtBearer(o =>
-            {
-                ConfigureDefaults(o);
-                configure.Invoke(o);
-            });
-        }
-
-        private void ConfigureDefaults(JwtBearerOptions o)
-        {
-        }
-
-        [Fact]
-        public async Task BearerTokenValidation()
-        {
-            var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(new string('a', 128)));
-            var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
-
-            var claims = new[]
-            {
-                new Claim(ClaimTypes.NameIdentifier, "Bob")
-            };
-
-            var token = new JwtSecurityToken(
-                issuer: "issuer.contoso.com",
-                audience: "audience.contoso.com",
-                claims: claims,
-                expires: DateTime.Now.AddMinutes(30),
-                signingCredentials: creds);
-
-            var tokenText = new JwtSecurityTokenHandler().WriteToken(token);
-
-            var server = CreateServer(o =>
-            {
-                o.TokenValidationParameters = new TokenValidationParameters()
-                {
-                    ValidIssuer = "issuer.contoso.com",
-                    ValidAudience = "audience.contoso.com",
-                    IssuerSigningKey = key,
-                };
-            });
-
-            var newBearerToken = "Bearer " + tokenText;
-            var response = await SendAsync(server, "http://example.com/oauth", newBearerToken);
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task SaveBearerToken()
-        {
-            var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(new string('a', 128)));
-            var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
-
-            var claims = new[]
-            {
-                new Claim(ClaimTypes.NameIdentifier, "Bob")
-            };
-
-            var token = new JwtSecurityToken(
-                issuer: "issuer.contoso.com",
-                audience: "audience.contoso.com",
-                claims: claims,
-                expires: DateTime.Now.AddMinutes(30),
-                signingCredentials: creds);
-
-            var tokenText = new JwtSecurityTokenHandler().WriteToken(token);
-
-            var server = CreateServer(o =>
-            {
-                o.SaveToken = true;
-                o.TokenValidationParameters = new TokenValidationParameters()
-                {
-                    ValidIssuer = "issuer.contoso.com",
-                    ValidAudience = "audience.contoso.com",
-                    IssuerSigningKey = key,
-                };
-            });
-
-            var newBearerToken = "Bearer " + tokenText;
-            var response = await SendAsync(server, "http://example.com/token", newBearerToken);
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-            Assert.Equal(tokenText, await response.Response.Content.ReadAsStringAsync());
-        }
-
-        [Fact]
-        public async Task SignInThrows()
-        {
-            var server = CreateServer();
-            var transaction = await server.SendAsync("https://example.com/signIn");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task SignOutThrows()
-        {
-            var server = CreateServer();
-            var transaction = await server.SendAsync("https://example.com/signOut");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ThrowAtAuthenticationFailedEvent()
-        {
-            var server = CreateServer(o =>
-            {
-                o.Events = new JwtBearerEvents
-                {
-                    OnAuthenticationFailed = context =>
-                    {
-                        context.Response.StatusCode = 401;
-                        throw new Exception();
-                    },
-                    OnMessageReceived = context =>
-                    {
-                        context.Token = "something";
-                        return Task.FromResult(0);
-                    }
-                };
-                o.SecurityTokenValidators.Clear();
-                o.SecurityTokenValidators.Insert(0, new InvalidTokenValidator());
-            },
-            async (context, next) =>
-            {
-                try
-                {
-                    await next();
-                    Assert.False(true, "Expected exception is not thrown");
-                }
-                catch (Exception)
-                {
-                    context.Response.StatusCode = 401;
-                    await context.Response.WriteAsync("i got this");
-                }
-            });
-
-            var transaction = await server.SendAsync("https://example.com/signIn");
-
-            Assert.Equal(HttpStatusCode.Unauthorized, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task CustomHeaderReceived()
-        {
-            var server = CreateServer(o =>
-            {
-                o.Events = new JwtBearerEvents()
-                {
-                    OnMessageReceived = context =>
-                    {
-                        var claims = new[]
-                        {
-                            new Claim(ClaimTypes.NameIdentifier, "Bob le Magnifique"),
-                            new Claim(ClaimTypes.Email, "bob@contoso.com"),
-                            new Claim(ClaimsIdentity.DefaultNameClaimType, "bob")
-                        };
-
-                        context.Principal = new ClaimsPrincipal(new ClaimsIdentity(claims, context.Scheme.Name));
-                        context.Success();
-
-                        return Task.FromResult<object>(null);
-                    }
-                };
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "someHeader someblob");
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-            Assert.Equal("Bob le Magnifique", response.ResponseText);
-        }
-
-        [Fact]
-        public async Task NoHeaderReceived()
-        {
-            var server = CreateServer();
-            var response = await SendAsync(server, "http://example.com/oauth");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task HeaderWithoutBearerReceived()
-        {
-            var server = CreateServer();
-            var response = await SendAsync(server, "http://example.com/oauth", "Token");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task UnrecognizedTokenReceived()
-        {
-            var server = CreateServer();
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer someblob");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-            Assert.Equal("", response.ResponseText);
-        }
-
-        [Fact]
-        public async Task InvalidTokenReceived()
-        {
-            var server = CreateServer(options =>
-            {
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new InvalidTokenValidator());
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer someblob");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-            Assert.Equal("Bearer error=\"invalid_token\"", response.Response.Headers.WwwAuthenticate.First().ToString());
-            Assert.Equal("", response.ResponseText);
-        }
-
-        [Theory]
-        [InlineData(typeof(SecurityTokenInvalidAudienceException), "The audience is invalid")]
-        [InlineData(typeof(SecurityTokenInvalidIssuerException), "The issuer is invalid")]
-        [InlineData(typeof(SecurityTokenNoExpirationException), "The token has no expiration")]
-        [InlineData(typeof(SecurityTokenInvalidLifetimeException), "The token lifetime is invalid")]
-        [InlineData(typeof(SecurityTokenNotYetValidException), "The token is not valid yet")]
-        [InlineData(typeof(SecurityTokenExpiredException), "The token is expired")]
-        [InlineData(typeof(SecurityTokenInvalidSignatureException), "The signature is invalid")]
-        [InlineData(typeof(SecurityTokenSignatureKeyNotFoundException), "The signature key was not found")]
-        public async Task ExceptionReportedInHeaderForAuthenticationFailures(Type errorType, string message)
-        {
-            var server = CreateServer(options =>
-            {
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new InvalidTokenValidator(errorType));
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer someblob");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-            Assert.Equal($"Bearer error=\"invalid_token\", error_description=\"{message}\"", response.Response.Headers.WwwAuthenticate.First().ToString());
-            Assert.Equal("", response.ResponseText);
-        }
-
-        [Theory]
-        [InlineData(typeof(ArgumentException))]
-        public async Task ExceptionNotReportedInHeaderForOtherFailures(Type errorType)
-        {
-            var server = CreateServer(options =>
-            {
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new InvalidTokenValidator(errorType));
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer someblob");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-            Assert.Equal("Bearer error=\"invalid_token\"", response.Response.Headers.WwwAuthenticate.First().ToString());
-            Assert.Equal("", response.ResponseText);
-        }
-
-        [Fact]
-        public async Task ExceptionsReportedInHeaderForMultipleAuthenticationFailures()
-        {
-            var server = CreateServer(options =>
-            {
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new InvalidTokenValidator(typeof(SecurityTokenInvalidAudienceException)));
-                options.SecurityTokenValidators.Add(new InvalidTokenValidator(typeof(SecurityTokenSignatureKeyNotFoundException)));
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer someblob");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-            Assert.Equal("Bearer error=\"invalid_token\", error_description=\"The audience is invalid; The signature key was not found\"",
-                response.Response.Headers.WwwAuthenticate.First().ToString());
-            Assert.Equal("", response.ResponseText);
-        }
-
-        [Theory]
-        [InlineData("custom_error", "custom_description", "custom_uri")]
-        [InlineData("custom_error", "custom_description", null)]
-        [InlineData("custom_error", null, null)]
-        [InlineData(null, "custom_description", "custom_uri")]
-        [InlineData(null, "custom_description", null)]
-        [InlineData(null, null, "custom_uri")]
-        public async Task ExceptionsReportedInHeaderExposesUserDefinedError(string error, string description, string uri)
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents
-                {
-                    OnChallenge = context =>
-                    {
-                        context.Error = error;
-                        context.ErrorDescription = description;
-                        context.ErrorUri = uri;
-
-                        return Task.FromResult(0);
-                    }
-                };
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer someblob");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-            Assert.Equal("", response.ResponseText);
-
-            var builder = new StringBuilder(JwtBearerDefaults.AuthenticationScheme);
-
-            if (!string.IsNullOrEmpty(error))
-            {
-                builder.Append(" error=\"");
-                builder.Append(error);
-                builder.Append("\"");
-            }
-            if (!string.IsNullOrEmpty(description))
-            {
-                if (!string.IsNullOrEmpty(error))
-                {
-                    builder.Append(",");
-                }
-
-                builder.Append(" error_description=\"");
-                builder.Append(description);
-                builder.Append('\"');
-            }
-            if (!string.IsNullOrEmpty(uri))
-            {
-                if (!string.IsNullOrEmpty(error) ||
-                    !string.IsNullOrEmpty(description))
-                {
-                    builder.Append(",");
-                }
-
-                builder.Append(" error_uri=\"");
-                builder.Append(uri);
-                builder.Append('\"');
-            }
-
-            Assert.Equal(builder.ToString(), response.Response.Headers.WwwAuthenticate.First().ToString());
-        }
-
-        [Fact]
-        public async Task ExceptionNotReportedInHeaderWhenIncludeErrorDetailsIsFalse()
-        {
-            var server = CreateServer(o =>
-            {
-                o.IncludeErrorDetails = false;
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer someblob");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-            Assert.Equal("Bearer", response.Response.Headers.WwwAuthenticate.First().ToString());
-            Assert.Equal("", response.ResponseText);
-        }
-
-        [Fact]
-        public async Task ExceptionNotReportedInHeaderWhenTokenWasMissing()
-        {
-            var server = CreateServer();
-
-            var response = await SendAsync(server, "http://example.com/oauth");
-            Assert.Equal(HttpStatusCode.Unauthorized, response.Response.StatusCode);
-            Assert.Equal("Bearer", response.Response.Headers.WwwAuthenticate.First().ToString());
-            Assert.Equal("", response.ResponseText);
-        }
-
-        [Fact]
-        public async Task CustomTokenValidated()
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents()
-                {
-                    OnTokenValidated = context =>
-                    {
-                        // Retrieve the NameIdentifier claim from the identity
-                        // returned by the custom security token validator.
-                        var identity = (ClaimsIdentity)context.Principal.Identity;
-                        var identifier = identity.FindFirst(ClaimTypes.NameIdentifier);
-
-                        Assert.Equal("Bob le Tout Puissant", identifier.Value);
-
-                        // Remove the existing NameIdentifier claim and replace it
-                        // with a new one containing a different value.
-                        identity.RemoveClaim(identifier);
-                        // Make sure to use a different name identifier
-                        // than the one defined by BlobTokenValidator.
-                        identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, "Bob le Magnifique"));
-
-                        return Task.FromResult<object>(null);
-                    }
-                };
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new BlobTokenValidator(JwtBearerDefaults.AuthenticationScheme));
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer someblob");
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-            Assert.Equal("Bob le Magnifique", response.ResponseText);
-        }
-
-        [Fact]
-        public async Task RetrievingTokenFromAlternateLocation()
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents()
-                {
-                    OnMessageReceived = context =>
-                    {
-                        context.Token = "CustomToken";
-                        return Task.FromResult<object>(null);
-                    }
-                };
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new BlobTokenValidator("JWT", token =>
-                {
-                    Assert.Equal("CustomToken", token);
-                }));
-            });
-
-            var response = await SendAsync(server, "http://example.com/oauth", "Bearer Token");
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-            Assert.Equal("Bob le Tout Puissant", response.ResponseText);
-        }
-
-        [Fact]
-        public async Task EventOnMessageReceivedSkip_NoMoreEventsExecuted()
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents()
-                {
-                    OnMessageReceived = context =>
-                    {
-                        context.NoResult();
-                        return Task.FromResult(0);
-                    },
-                    OnTokenValidated = context =>
-                    {
-                        throw new NotImplementedException();
-                    },
-                    OnAuthenticationFailed = context =>
-                    {
-                        throw new NotImplementedException(context.Exception.ToString());
-                    },
-                    OnChallenge = context =>
-                    {
-                        throw new NotImplementedException();
-                    },
-                };
-            });
-
-            var response = await SendAsync(server, "http://example.com/checkforerrors", "Bearer Token");
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-            Assert.Equal(string.Empty, response.ResponseText);
-        }
-
-        [Fact]
-        public async Task EventOnMessageReceivedReject_NoMoreEventsExecuted()
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents()
-                {
-                    OnMessageReceived = context =>
-                    {
-                        context.Fail("Authentication was aborted from user code.");
-                        context.Response.StatusCode = StatusCodes.Status202Accepted;
-                        return Task.FromResult(0);
-                    },
-                    OnTokenValidated = context =>
-                    {
-                        throw new NotImplementedException();
-                    },
-                    OnAuthenticationFailed = context =>
-                    {
-                        throw new NotImplementedException(context.Exception.ToString());
-                    },
-                    OnChallenge = context =>
-                    {
-                        throw new NotImplementedException();
-                    },
-                };
-            });
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return SendAsync(server, "http://example.com/checkforerrors", "Bearer Token");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-        }
-
-        [Fact]
-        public async Task EventOnTokenValidatedSkip_NoMoreEventsExecuted()
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents()
-                {
-                    OnTokenValidated = context =>
-                    {
-                        context.NoResult();
-                        return Task.FromResult(0);
-                    },
-                    OnAuthenticationFailed = context =>
-                    {
-                        throw new NotImplementedException(context.Exception.ToString());
-                    },
-                    OnChallenge = context =>
-                    {
-                        throw new NotImplementedException();
-                    },
-                };
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new BlobTokenValidator("JWT"));
-            });
-
-            var response = await SendAsync(server, "http://example.com/checkforerrors", "Bearer Token");
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-            Assert.Equal(string.Empty, response.ResponseText);
-        }
-
-        [Fact]
-        public async Task EventOnTokenValidatedReject_NoMoreEventsExecuted()
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents()
-                {
-                    OnTokenValidated = context =>
-                    {
-                        context.Fail("Authentication was aborted from user code.");
-                        context.Response.StatusCode = StatusCodes.Status202Accepted;
-                        return Task.FromResult(0);
-                    },
-                    OnAuthenticationFailed = context =>
-                    {
-                        throw new NotImplementedException(context.Exception.ToString());
-                    },
-                    OnChallenge = context =>
-                    {
-                        throw new NotImplementedException();
-                    },
-                };
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new BlobTokenValidator("JWT"));
-            });
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return SendAsync(server, "http://example.com/checkforerrors", "Bearer Token");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-        }
-
-        [Fact]
-        public async Task EventOnAuthenticationFailedSkip_NoMoreEventsExecuted()
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents()
-                {
-                    OnTokenValidated = context =>
-                    {
-                        throw new Exception("Test Exception");
-                    },
-                    OnAuthenticationFailed = context =>
-                    {
-                        context.NoResult();
-                        return Task.FromResult(0);
-                    },
-                    OnChallenge = context =>
-                    {
-                        throw new NotImplementedException();
-                    },
-                };
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new BlobTokenValidator("JWT"));
-            });
-
-            var response = await SendAsync(server, "http://example.com/checkforerrors", "Bearer Token");
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-            Assert.Equal(string.Empty, response.ResponseText);
-        }
-
-        [Fact]
-        public async Task EventOnAuthenticationFailedReject_NoMoreEventsExecuted()
-        {
-            var server = CreateServer(options =>
-            {
-                options.Events = new JwtBearerEvents()
-                {
-                    OnTokenValidated = context =>
-                    {
-                        throw new Exception("Test Exception");
-                    },
-                    OnAuthenticationFailed = context =>
-                    {
-                        context.Fail("Authentication was aborted from user code.");
-                        context.Response.StatusCode = StatusCodes.Status202Accepted;
-                        return Task.FromResult(0);
-                    },
-                    OnChallenge = context =>
-                    {
-                        throw new NotImplementedException();
-                    },
-                };
-                options.SecurityTokenValidators.Clear();
-                options.SecurityTokenValidators.Add(new BlobTokenValidator("JWT"));
-            });
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return SendAsync(server, "http://example.com/checkforerrors", "Bearer Token");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-        }
-
-        [Fact]
-        public async Task EventOnChallengeSkip_ResponseNotModified()
-        {
-            var server = CreateServer(o =>
-            {
-                o.Events = new JwtBearerEvents()
-                {
-                    OnChallenge = context =>
-                    {
-                        context.HandleResponse();
-                        return Task.FromResult(0);
-                    },
-                };
-            });
-
-            var response = await SendAsync(server, "http://example.com/unauthorized", "Bearer Token");
-            Assert.Equal(HttpStatusCode.OK, response.Response.StatusCode);
-            Assert.Empty(response.Response.Headers.WwwAuthenticate);
-            Assert.Equal(string.Empty, response.ResponseText);
-        }
-
-        class InvalidTokenValidator : ISecurityTokenValidator
-        {
-            public InvalidTokenValidator()
-            {
-                ExceptionType = typeof(SecurityTokenException);
-            }
-
-            public InvalidTokenValidator(Type exceptionType)
-            {
-                ExceptionType = exceptionType;
-            }
-
-            public Type ExceptionType { get; set; }
-
-            public bool CanValidateToken => true;
-
-            public int MaximumTokenSizeInBytes
-            {
-                get { throw new NotImplementedException(); }
-                set { throw new NotImplementedException(); }
-            }
-
-            public bool CanReadToken(string securityToken) => true;
-
-            public ClaimsPrincipal ValidateToken(string securityToken, TokenValidationParameters validationParameters, out SecurityToken validatedToken)
-            {
-                var constructor = ExceptionType.GetTypeInfo().GetConstructor(new[] { typeof(string) });
-                var exception = (Exception)constructor.Invoke(new[] { ExceptionType.Name });
-                throw exception;
-            }
-        }
-
-        class BlobTokenValidator : ISecurityTokenValidator
-        {
-            private Action<string> _tokenValidator;
-
-            public BlobTokenValidator(string authenticationScheme)
-            {
-                AuthenticationScheme = authenticationScheme;
-
-            }
-            public BlobTokenValidator(string authenticationScheme, Action<string> tokenValidator)
-            {
-                AuthenticationScheme = authenticationScheme;
-                _tokenValidator = tokenValidator;
-            }
-
-            public string AuthenticationScheme { get; }
-
-            public bool CanValidateToken => true;
-
-            public int MaximumTokenSizeInBytes
-            {
-                get
-                {
-                    throw new NotImplementedException();
-                }
-                set
-                {
-                    throw new NotImplementedException();
-                }
-            }
-
-            public bool CanReadToken(string securityToken) => true;
-
-            public ClaimsPrincipal ValidateToken(string securityToken, TokenValidationParameters validationParameters, out SecurityToken validatedToken)
-            {
-                validatedToken = null;
-                _tokenValidator?.Invoke(securityToken);
-
-                var claims = new[]
-                {
-                    // Make sure to use a different name identifier
-                    // than the one defined by CustomTokenValidated.
-                    new Claim(ClaimTypes.NameIdentifier, "Bob le Tout Puissant"),
-                    new Claim(ClaimTypes.Email, "bob@contoso.com"),
-                    new Claim(ClaimsIdentity.DefaultNameClaimType, "bob"),
-                };
-
-                return new ClaimsPrincipal(new ClaimsIdentity(claims, AuthenticationScheme));
-            }
-        }
-
-        private static TestServer CreateServer(Action<JwtBearerOptions> options = null, Func<HttpContext, Func<Task>, Task> handlerBeforeAuth = null)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    if (handlerBeforeAuth != null)
-                    {
-                        app.Use(handlerBeforeAuth);
-                    }
-
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        if (context.Request.Path == new PathString("/checkforerrors"))
-                        {
-                            var result = await context.AuthenticateAsync(JwtBearerDefaults.AuthenticationScheme); // this used to be "Automatic"
-                            if (result.Failure != null)
-                            {
-                                throw new Exception("Failed to authenticate", result.Failure);
-                            }
-                            return;
-                        }
-                        else if (context.Request.Path == new PathString("/oauth"))
-                        {
-                            if (context.User == null ||
-                                context.User.Identity == null ||
-                                !context.User.Identity.IsAuthenticated)
-                            {
-                                context.Response.StatusCode = 401;
-                                // REVIEW: no more automatic challenge
-                                await context.ChallengeAsync(JwtBearerDefaults.AuthenticationScheme);
-                                return;
-                            }
-
-                            var identifier = context.User.FindFirst(ClaimTypes.NameIdentifier);
-                            if (identifier == null)
-                            {
-                                context.Response.StatusCode = 500;
-                                return;
-                            }
-
-                            await context.Response.WriteAsync(identifier.Value);
-                        }
-                        else if (context.Request.Path == new PathString("/token"))
-                        {
-                            var token = await context.GetTokenAsync("access_token");
-                            await context.Response.WriteAsync(token);
-                        }
-                        else if (context.Request.Path == new PathString("/unauthorized"))
-                        {
-                            // Simulate Authorization failure 
-                            var result = await context.AuthenticateAsync(JwtBearerDefaults.AuthenticationScheme);
-                            await context.ChallengeAsync(JwtBearerDefaults.AuthenticationScheme);
-                        }
-                        else if (context.Request.Path == new PathString("/signIn"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(JwtBearerDefaults.AuthenticationScheme, new ClaimsPrincipal()));
-                        }
-                        else if (context.Request.Path == new PathString("/signOut"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignOutAsync(JwtBearerDefaults.AuthenticationScheme));
-                        }
-                        else
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(services => services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer(options));
-
-            return new TestServer(builder);
-        }
-
-        // TODO: see if we can share the TestExtensions SendAsync method (only diff is auth header)
-        private static async Task<Transaction> SendAsync(TestServer server, string uri, string authorizationHeader = null)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, uri);
-            if (!string.IsNullOrEmpty(authorizationHeader))
-            {
-                request.Headers.Add("Authorization", authorizationHeader);
-            }
-
-            var transaction = new Transaction
-            {
-                Request = request,
-                Response = await server.CreateClient().SendAsync(request),
-            };
-
-            transaction.ResponseText = await transaction.Response.Content.ReadAsStringAsync();
-
-            if (transaction.Response.Content != null &&
-                transaction.Response.Content.Headers.ContentType != null &&
-                transaction.Response.Content.Headers.ContentType.MediaType == "text/xml")
-            {
-                transaction.ResponseElement = XElement.Parse(transaction.ResponseText);
-            }
-
-            return transaction;
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/Microsoft.AspNetCore.Authentication.Test.csproj b/test/Microsoft.AspNetCore.Authentication.Test/Microsoft.AspNetCore.Authentication.Test.csproj
deleted file mode 100644
index c7a380868..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/Microsoft.AspNetCore.Authentication.Test.csproj
+++ /dev/null
@@ -1,47 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <None Remove="OpenIdConnect\wellknownconfig.json" />
-    <None Remove="OpenIdConnect\wellknownkeys.json" />
-    <None Remove="WsFederation\federationmetadata.xml" />
-    <None Remove="WsFederation\InvalidToken.xml" />
-    <None Remove="WsFederation\ValidToken.xml" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <Content Include="WsFederation\federationmetadata.xml">
-      <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
-    </Content>
-    <Content Include="WsFederation\InvalidToken.xml">
-      <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
-    </Content>
-    <Content Include="WsFederation\ValidToken.xml">
-      <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
-    </Content>
-  </ItemGroup>
-
-  <ItemGroup>
-    <EmbeddedResource Include="OpenIdConnect\wellknownconfig.json" />
-    <EmbeddedResource Include="OpenIdConnect\wellknownkeys.json" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Facebook\Microsoft.AspNetCore.Authentication.Facebook.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Google\Microsoft.AspNetCore.Authentication.Google.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.JwtBearer\Microsoft.AspNetCore.Authentication.JwtBearer.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.MicrosoftAccount\Microsoft.AspNetCore.Authentication.MicrosoftAccount.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.OpenIdConnect\Microsoft.AspNetCore.Authentication.OpenIdConnect.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Twitter\Microsoft.AspNetCore.Authentication.Twitter.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.WsFederation\Microsoft.AspNetCore.Authentication.WsFederation.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.TestHost" Version="$(MicrosoftAspNetCoreTestHostPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/MicrosoftAccountTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/MicrosoftAccountTests.cs
deleted file mode 100644
index 26a5484c8..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/MicrosoftAccountTests.cs
+++ /dev/null
@@ -1,310 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Authentication.MicrosoftAccount;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging.Abstractions;
-using Newtonsoft.Json;
-using System;
-using System.Linq;
-using System.Net;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Tests.MicrosoftAccount
-{
-    public class MicrosoftAccountTests : RemoteAuthenticationTests<MicrosoftAccountOptions>
-    {
-        protected override string DefaultScheme => MicrosoftAccountDefaults.AuthenticationScheme;
-        protected override Type HandlerType => typeof(MicrosoftAccountHandler);
-        protected override bool SupportsSignIn { get => false; }
-        protected override bool SupportsSignOut { get => false; }
-
-        protected override void RegisterAuth(AuthenticationBuilder services, Action<MicrosoftAccountOptions> configure)
-        {
-            services.AddMicrosoftAccount(o =>
-            {
-                ConfigureDefaults(o);
-                configure.Invoke(o);
-            });
-        }
-
-        protected override void ConfigureDefaults(MicrosoftAccountOptions o)
-        {
-            o.ClientId = "whatever";
-            o.ClientSecret = "whatever";
-            o.SignInScheme = "auth1";
-        }
-
-        [Fact]
-        public async Task ChallengeWillTriggerApplyRedirectEvent()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Client Id";
-                o.ClientSecret = "Test Client Secret";
-                o.Events = new OAuthEvents
-                {
-                    OnRedirectToAuthorizationEndpoint = context =>
-                    {
-                        context.Response.Redirect(context.RedirectUri + "&custom=test");
-                        return Task.FromResult(0);
-                    }
-                };
-            });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var query = transaction.Response.Headers.Location.Query;
-            Assert.Contains("custom=test", query);
-        }
-
-        [Fact]
-        public async Task SignInThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signIn");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task SignOutThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signOut");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ForbidThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signOut");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ChallengeWillTriggerRedirection()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-            });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.AbsoluteUri;
-            Assert.Contains("https://login.microsoftonline.com/common/oauth2/v2.0/authorize", location);
-            Assert.Contains("response_type=code", location);
-            Assert.Contains("client_id=", location);
-            Assert.Contains("redirect_uri=", location);
-            Assert.Contains("scope=", location);
-            Assert.Contains("state=", location);
-        }
-
-        [Fact]
-        public async Task ChallengeWillIncludeScopeAsConfigured()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.Scope.Clear();
-                o.Scope.Add("foo");
-                o.Scope.Add("bar");
-            });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=foo%20bar", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task ChallengeWillIncludeScopeAsOverwritten()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.Scope.Clear();
-                o.Scope.Add("foo");
-                o.Scope.Add("bar");
-            });
-            var transaction = await server.SendAsync("http://example.com/challengeWithOtherScope");
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=baz%20qux", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task ChallengeWillIncludeScopeAsOverwrittenWithBaseAuthenticationProperties()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Id";
-                o.ClientSecret = "Test Secret";
-                o.Scope.Clear();
-                o.Scope.Add("foo");
-                o.Scope.Add("bar");
-            });
-            var transaction = await server.SendAsync("http://example.com/challengeWithOtherScopeWithBaseAuthenticationProperties");
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=baz%20qux", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task AuthenticatedEventCanGetRefreshToken()
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("MsftTest"));
-            var server = CreateServer(o =>
-            {
-                o.ClientId = "Test Client Id";
-                o.ClientSecret = "Test Client Secret";
-                o.StateDataFormat = stateFormat;
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = req =>
-                    {
-                        if (req.RequestUri.AbsoluteUri == "https://login.microsoftonline.com/common/oauth2/v2.0/token")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                access_token = "Test Access Token",
-                                expire_in = 3600,
-                                token_type = "Bearer",
-                                refresh_token = "Test Refresh Token"
-                            });
-                        }
-                        else if (req.RequestUri.GetComponents(UriComponents.SchemeAndServer | UriComponents.Path, UriFormat.UriEscaped) == "https://graph.microsoft.com/v1.0/me")
-                        {
-                            return ReturnJsonResponse(new
-                            {
-                                id = "Test User ID",
-                                displayName = "Test Name",
-                                givenName = "Test Given Name",
-                                surname = "Test Family Name",
-                                mail = "Test email"
-                            });
-                        }
-
-                        return null;
-                    }
-                };
-                o.Events = new OAuthEvents
-                {
-                    OnCreatingTicket = context =>
-                    {
-                        var refreshToken = context.RefreshToken;
-                        context.Principal.AddIdentity(new ClaimsIdentity(new Claim[] { new Claim("RefreshToken", refreshToken, ClaimValueTypes.String, "Microsoft") }, "Microsoft"));
-                        return Task.FromResult<object>(null);
-                    }
-                };
-            });
-            var properties = new AuthenticationProperties();
-            var correlationKey = ".xsrf";
-            var correlationValue = "TestCorrelationId";
-            properties.Items.Add(correlationKey, correlationValue);
-            properties.RedirectUri = "/me";
-            var state = stateFormat.Protect(properties);
-            var transaction = await server.SendAsync(
-                "https://example.com/signin-microsoft?code=TestCode&state=" + UrlEncoder.Default.Encode(state),
-                $".AspNetCore.Correlation.Microsoft.{correlationValue}=N");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/me", transaction.Response.Headers.GetValues("Location").First());
-            Assert.Equal(2, transaction.SetCookie.Count);
-            Assert.Contains($".AspNetCore.Correlation.Microsoft.{correlationValue}", transaction.SetCookie[0]);
-            Assert.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme, transaction.SetCookie[1]);
-
-            var authCookie = transaction.AuthenticationCookieValue;
-            transaction = await server.SendAsync("https://example.com/me", authCookie);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-            Assert.Equal("Test Refresh Token", transaction.FindClaimValue("RefreshToken"));
-        }
-
-        private static TestServer CreateServer(Action<MicrosoftAccountOptions> configureOptions)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        var req = context.Request;
-                        var res = context.Response;
-                        if (req.Path == new PathString("/challenge"))
-                        {
-                            await context.ChallengeAsync("Microsoft");
-                        }
-                        else if (req.Path == new PathString("/challengeWithOtherScope"))
-                        {
-                            var properties = new OAuthChallengeProperties();
-                            properties.SetScope("baz", "qux");
-                            await context.ChallengeAsync("Microsoft", properties);
-                        }
-                        else if (req.Path == new PathString("/challengeWithOtherScopeWithBaseAuthenticationProperties"))
-                        {
-                            var properties = new AuthenticationProperties();
-                            properties.SetParameter(OAuthChallengeProperties.ScopeKey, new string[] { "baz", "qux" });
-                            await context.ChallengeAsync("Microsoft", properties);
-                        }
-                        else if (req.Path == new PathString("/me"))
-                        {
-                            res.Describe(context.User);
-                        }
-                        else if (req.Path == new PathString("/signIn"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync("Microsoft", new ClaimsPrincipal()));
-                        }
-                        else if (req.Path == new PathString("/signOut"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignOutAsync("Microsoft"));
-                        }
-                        else if (req.Path == new PathString("/forbid"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.ForbidAsync("Microsoft"));
-                        }
-                        else
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication(TestExtensions.CookieAuthenticationScheme)
-                        .AddCookie(TestExtensions.CookieAuthenticationScheme, o => { })
-                        .AddMicrosoftAccount(configureOptions);
-                });
-            return new TestServer(builder);
-        }
-
-        private static HttpResponseMessage ReturnJsonResponse(object content)
-        {
-            var res = new HttpResponseMessage(HttpStatusCode.OK);
-            var text = JsonConvert.SerializeObject(content);
-            res.Content = new StringContent(text, Encoding.UTF8, "application/json");
-            return res;
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OAuthChallengePropertiesTest.cs b/test/Microsoft.AspNetCore.Authentication.Test/OAuthChallengePropertiesTest.cs
deleted file mode 100644
index c359bb0e8..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OAuthChallengePropertiesTest.cs
+++ /dev/null
@@ -1,149 +0,0 @@
-using System;
-using Microsoft.AspNetCore.Authentication.Google;
-using Microsoft.AspNetCore.Authentication.OAuth;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Test
-{
-    public class OAuthChallengePropertiesTest
-    {
-        [Fact]
-        public void ScopeProperty()
-        {
-            var properties = new OAuthChallengeProperties
-            {
-                Scope = new string[] { "foo", "bar" }
-            };
-            Assert.Equal(new string[] { "foo", "bar" }, properties.Scope);
-            Assert.Equal(new string[] { "foo", "bar" }, properties.Parameters["scope"]);
-        }
-
-        [Fact]
-        public void ScopeProperty_NullValue()
-        {
-            var properties = new OAuthChallengeProperties();
-            properties.Parameters["scope"] = new string[] { "foo", "bar" };
-            Assert.Equal(new string[] { "foo", "bar" }, properties.Scope);
-
-            properties.Scope = null;
-            Assert.Null(properties.Scope);
-        }
-
-        [Fact]
-        public void SetScope()
-        {
-            var properties = new OAuthChallengeProperties();
-            properties.SetScope("foo", "bar");
-            Assert.Equal(new string[] { "foo", "bar" }, properties.Scope);
-            Assert.Equal(new string[] { "foo", "bar" }, properties.Parameters["scope"]);
-        }
-
-        [Fact]
-        public void OidcMaxAge()
-        {
-            var properties = new OpenIdConnectChallengeProperties()
-            {
-                MaxAge = TimeSpan.FromSeconds(200)
-            };
-            Assert.Equal(TimeSpan.FromSeconds(200), properties.MaxAge);
-        }
-
-        [Fact]
-        public void OidcMaxAge_NullValue()
-        {
-            var properties = new OpenIdConnectChallengeProperties();
-            properties.Parameters["max_age"] = TimeSpan.FromSeconds(500);
-            Assert.Equal(TimeSpan.FromSeconds(500), properties.MaxAge);
-
-            properties.MaxAge = null;
-            Assert.Null(properties.MaxAge);
-        }
-
-        [Fact]
-        public void OidcPrompt()
-        {
-            var properties = new OpenIdConnectChallengeProperties()
-            {
-                Prompt = "login"
-            };
-            Assert.Equal("login", properties.Prompt);
-            Assert.Equal("login", properties.Parameters["prompt"]);
-        }
-
-        [Fact]
-        public void OidcPrompt_NullValue()
-        {
-            var properties = new OpenIdConnectChallengeProperties();
-            properties.Parameters["prompt"] = "consent";
-            Assert.Equal("consent", properties.Prompt);
-
-            properties.Prompt = null;
-            Assert.Null(properties.Prompt);
-        }
-
-        [Fact]
-        public void GoogleProperties()
-        {
-            var properties = new GoogleChallengeProperties()
-            {
-                AccessType = "offline",
-                ApprovalPrompt = "force",
-                LoginHint = "test@example.com",
-                Prompt = "login",
-            };
-            Assert.Equal("offline", properties.AccessType);
-            Assert.Equal("offline", properties.Parameters["access_type"]);
-            Assert.Equal("force", properties.ApprovalPrompt);
-            Assert.Equal("force", properties.Parameters["approval_prompt"]);
-            Assert.Equal("test@example.com", properties.LoginHint);
-            Assert.Equal("test@example.com", properties.Parameters["login_hint"]);
-            Assert.Equal("login", properties.Prompt);
-            Assert.Equal("login", properties.Parameters["prompt"]);
-        }
-
-        [Fact]
-        public void GoogleProperties_NullValues()
-        {
-            var properties = new GoogleChallengeProperties();
-            properties.Parameters["access_type"] = "offline";
-            properties.Parameters["approval_prompt"] = "force";
-            properties.Parameters["login_hint"] = "test@example.com";
-            properties.Parameters["prompt"] = "login";
-            Assert.Equal("offline", properties.AccessType);
-            Assert.Equal("force", properties.ApprovalPrompt);
-            Assert.Equal("test@example.com", properties.LoginHint);
-            Assert.Equal("login", properties.Prompt);
-
-            properties.AccessType = null;
-            Assert.Null(properties.AccessType);
-
-            properties.ApprovalPrompt = null;
-            Assert.Null(properties.ApprovalPrompt);
-
-            properties.LoginHint = null;
-            Assert.Null(properties.LoginHint);
-
-            properties.Prompt = null;
-            Assert.Null(properties.Prompt);
-        }
-
-        [Fact]
-        public void GoogleIncludeGrantedScopes()
-        {
-            var properties = new GoogleChallengeProperties()
-            {
-                IncludeGrantedScopes = true
-            };
-            Assert.True(properties.IncludeGrantedScopes);
-            Assert.Equal(true, properties.Parameters["include_granted_scopes"]);
-
-            properties.IncludeGrantedScopes = false;
-            Assert.False(properties.IncludeGrantedScopes);
-            Assert.Equal(false, properties.Parameters["include_granted_scopes"]);
-
-            properties.IncludeGrantedScopes = null;
-            Assert.Null(properties.IncludeGrantedScopes);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OAuthTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/OAuthTests.cs
deleted file mode 100644
index 838798cea..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OAuthTests.cs
+++ /dev/null
@@ -1,434 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using System;
-using System.Collections.Generic;
-using System.Net;
-using System.Threading.Tasks;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.OAuth
-{
-    public class OAuthTests : RemoteAuthenticationTests<OAuthOptions>
-    {
-        protected override string DefaultScheme => OAuthDefaults.DisplayName;
-        protected override Type HandlerType => typeof(OAuthHandler<OAuthOptions>);
-        protected override bool SupportsSignIn { get => false; }
-        protected override bool SupportsSignOut { get => false; }
-
-        protected override void RegisterAuth(AuthenticationBuilder services, Action<OAuthOptions> configure)
-        {
-            services.AddOAuth(DefaultScheme, o =>
-            {
-                ConfigureDefaults(o);
-                configure.Invoke(o);
-            });
-        }
-
-        [Fact]
-        public async Task ThrowsIfClientIdMissing()
-        {
-            var server = CreateServer(
-                services => services.AddAuthentication().AddOAuth("weeblie", o =>
-                {
-                    o.SignInScheme = "whatever";
-                    o.CallbackPath = "/";
-                    o.ClientSecret = "whatever";
-                    o.TokenEndpoint = "/";
-                    o.AuthorizationEndpoint = "/";
-                }));
-            await Assert.ThrowsAsync<ArgumentException>("ClientId", () => server.SendAsync("http://example.com/"));
-        }
-
-        [Fact]
-        public async Task ThrowsIfClientSecretMissing()
-        {
-            var server = CreateServer(
-                services => services.AddAuthentication().AddOAuth("weeblie", o =>
-                {
-                    o.SignInScheme = "whatever";
-                    o.ClientId = "Whatever;";
-                    o.CallbackPath = "/";
-                    o.TokenEndpoint = "/";
-                    o.AuthorizationEndpoint = "/";
-                }));
-            await Assert.ThrowsAsync<ArgumentException>("ClientSecret", () => server.SendAsync("http://example.com/"));
-        }
-
-        [Fact]
-        public async Task ThrowsIfCallbackPathMissing()
-        {
-            var server = CreateServer(
-                services => services.AddAuthentication().AddOAuth("weeblie", o =>
-                {
-                    o.ClientId = "Whatever;";
-                    o.ClientSecret = "Whatever;";
-                    o.TokenEndpoint = "/";
-                    o.AuthorizationEndpoint = "/";
-                    o.SignInScheme = "eh";
-                }));
-            await Assert.ThrowsAsync<ArgumentException>("CallbackPath", () => server.SendAsync("http://example.com/"));
-        }
-
-        [Fact]
-        public async Task ThrowsIfTokenEndpointMissing()
-        {
-            var server = CreateServer(
-                services => services.AddAuthentication().AddOAuth("weeblie", o =>
-                {
-                    o.ClientId = "Whatever;";
-                    o.ClientSecret = "Whatever;";
-                    o.CallbackPath = "/";
-                    o.AuthorizationEndpoint = "/";
-                    o.SignInScheme = "eh";
-                }));
-            await Assert.ThrowsAsync<ArgumentException>("TokenEndpoint", () => server.SendAsync("http://example.com/"));
-        }
-
-        [Fact]
-        public async Task ThrowsIfAuthorizationEndpointMissing()
-        {
-            var server = CreateServer(
-                services => services.AddAuthentication().AddOAuth("weeblie", o =>
-                {
-                    o.ClientId = "Whatever;";
-                    o.ClientSecret = "Whatever;";
-                    o.CallbackPath = "/";
-                    o.TokenEndpoint = "/";
-                    o.SignInScheme = "eh";
-                }));
-            await Assert.ThrowsAsync<ArgumentException>("AuthorizationEndpoint", () => server.SendAsync("http://example.com/"));
-        }
-
-        [Fact]
-        public async Task RedirectToIdentityProvider_SetsCorrelationIdCookiePath_ToCallBackPath()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        ConfigureDefaults(opt);
-                    }),
-                async ctx =>
-                {
-                    await ctx.ChallengeAsync("Weblie");
-                    return true;
-                });
-
-            var transaction = await server.SendAsync("https://www.example.com/challenge");
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-            var setCookie = Assert.Single(res.Headers, h => h.Key == "Set-Cookie");
-            var correlation = Assert.Single(setCookie.Value, v => v.StartsWith(".AspNetCore.Correlation."));
-            Assert.Contains("path=/oauth-callback", correlation);
-        }
-
-        [Fact]
-        public async Task RedirectToAuthorizeEndpoint_CorrelationIdCookieOptions_CanBeOverriden()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        ConfigureDefaults(opt);
-                        opt.CorrelationCookie.Path = "/";
-                    }),
-                async ctx =>
-                {
-                    await ctx.ChallengeAsync("Weblie");
-                    return true;
-                });
-
-            var transaction = await server.SendAsync("https://www.example.com/challenge");
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-            var setCookie = Assert.Single(res.Headers, h => h.Key == "Set-Cookie");
-            var correlation = Assert.Single(setCookie.Value, v => v.StartsWith(".AspNetCore.Correlation."));
-            Assert.Contains("path=/", correlation);
-        }
-
-        [Fact]
-        public async Task RedirectToAuthorizeEndpoint_HasScopeAsConfigured()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        ConfigureDefaults(opt);
-                        opt.Scope.Clear();
-                        opt.Scope.Add("foo");
-                        opt.Scope.Add("bar");
-                    }),
-                async ctx =>
-                {
-                    await ctx.ChallengeAsync("Weblie");
-                    return true;
-                });
-
-            var transaction = await server.SendAsync("https://www.example.com/challenge");
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=foo%20bar", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task RedirectToAuthorizeEndpoint_HasScopeAsOverwritten()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        ConfigureDefaults(opt);
-                        opt.Scope.Clear();
-                        opt.Scope.Add("foo");
-                        opt.Scope.Add("bar");
-                    }),
-                async ctx =>
-                {
-                    var properties = new OAuthChallengeProperties();
-                    properties.SetScope("baz", "qux");
-                    await ctx.ChallengeAsync("Weblie", properties);
-                    return true;
-                });
-
-            var transaction = await server.SendAsync("https://www.example.com/challenge");
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=baz%20qux", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task RedirectToAuthorizeEndpoint_HasScopeAsOverwrittenWithBaseAuthenticationProperties()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        ConfigureDefaults(opt);
-                        opt.Scope.Clear();
-                        opt.Scope.Add("foo");
-                        opt.Scope.Add("bar");
-                    }),
-                async ctx =>
-                {
-                    var properties = new AuthenticationProperties();
-                    properties.SetParameter(OAuthChallengeProperties.ScopeKey, new string[] { "baz", "qux" });
-                    await ctx.ChallengeAsync("Weblie", properties);
-                    return true;
-                });
-
-            var transaction = await server.SendAsync("https://www.example.com/challenge");
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.Contains("scope=baz%20qux", res.Headers.Location.Query);
-        }
-
-        protected override void ConfigureDefaults(OAuthOptions o)
-        {
-            o.ClientId = "Test Id";
-            o.ClientSecret = "secret";
-            o.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-            o.AuthorizationEndpoint = "https://example.com/provider/login";
-            o.TokenEndpoint = "https://example.com/provider/token";
-            o.CallbackPath = "/oauth-callback";
-        }
-
-        [Fact]
-        public async Task HandleRequestAsync_RedirectsToAccessDeniedPathWhenExplicitlySet()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        opt.ClientId = "Test Id";
-                        opt.ClientSecret = "secret";
-                        opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        opt.AuthorizationEndpoint = "https://example.com/provider/login";
-                        opt.TokenEndpoint = "https://example.com/provider/token";
-                        opt.CallbackPath = "/oauth-callback";
-                        opt.AccessDeniedPath = "/access-denied";
-                        opt.StateDataFormat = new TestStateDataFormat();
-                        opt.Events.OnRemoteFailure = context => throw new InvalidOperationException("This event should not be called.");
-                    }));
-
-            var transaction = await server.SendAsync("https://www.example.com/oauth-callback?error=access_denied&state=protected_state",
-                ".AspNetCore.Correlation.Weblie.correlationId=N");
-
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/access-denied?ReturnUrl=http%3A%2F%2Ftesthost%2Fredirect", transaction.Response.Headers.Location.ToString());
-        }
-
-        [Fact]
-        public async Task HandleRequestAsync_InvokesAccessDeniedEvent()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        opt.ClientId = "Test Id";
-                        opt.ClientSecret = "secret";
-                        opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        opt.AuthorizationEndpoint = "https://example.com/provider/login";
-                        opt.TokenEndpoint = "https://example.com/provider/token";
-                        opt.CallbackPath = "/oauth-callback";
-                        opt.StateDataFormat = new TestStateDataFormat();
-                        opt.Events = new OAuthEvents()
-                        {
-                            OnAccessDenied = context =>
-                            {
-                                Assert.Equal("testvalue", context.Properties.Items["testkey"]);
-                                context.Response.StatusCode = StatusCodes.Status406NotAcceptable;
-                                context.HandleResponse();
-                                return Task.CompletedTask;
-                            }
-                        };
-                    }));
-
-            var transaction = await server.SendAsync("https://www.example.com/oauth-callback?error=access_denied&state=protected_state",
-                ".AspNetCore.Correlation.Weblie.correlationId=N");
-
-            Assert.Equal(HttpStatusCode.NotAcceptable, transaction.Response.StatusCode);
-            Assert.Null(transaction.Response.Headers.Location);
-        }
-
-        [Fact]
-        public async Task HandleRequestAsync_InvokesRemoteFailureEventWhenAccessDeniedPathIsNotExplicitlySet()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        opt.ClientId = "Test Id";
-                        opt.ClientSecret = "secret";
-                        opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        opt.AuthorizationEndpoint = "https://example.com/provider/login";
-                        opt.TokenEndpoint = "https://example.com/provider/token";
-                        opt.CallbackPath = "/oauth-callback";
-                        opt.StateDataFormat = new TestStateDataFormat();
-                        opt.Events = new OAuthEvents()
-                        {
-                            OnRemoteFailure = context =>
-                            {
-                                Assert.Equal("Access was denied by the resource owner or by the remote server.", context.Failure.Message);
-                                Assert.Equal("testvalue", context.Properties.Items["testkey"]);
-                                context.Response.StatusCode = StatusCodes.Status406NotAcceptable;
-                                context.HandleResponse();
-                                return Task.CompletedTask;
-                            }
-                        };
-                    }));
-
-            var transaction = await server.SendAsync("https://www.example.com/oauth-callback?error=access_denied&state=protected_state",
-                ".AspNetCore.Correlation.Weblie.correlationId=N");
-
-            Assert.Equal(HttpStatusCode.NotAcceptable, transaction.Response.StatusCode);
-            Assert.Null(transaction.Response.Headers.Location);
-        }
-
-        [Fact]
-        public async Task RemoteAuthenticationFailed_OAuthError_IncludesProperties()
-        {
-            var server = CreateServer(
-                s => s.AddAuthentication().AddOAuth(
-                    "Weblie",
-                    opt =>
-                    {
-                        opt.ClientId = "Test Id";
-                        opt.ClientSecret = "secret";
-                        opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        opt.AuthorizationEndpoint = "https://example.com/provider/login";
-                        opt.TokenEndpoint = "https://example.com/provider/token";
-                        opt.CallbackPath = "/oauth-callback";
-                        opt.StateDataFormat = new TestStateDataFormat();
-                        opt.Events = new OAuthEvents()
-                        {
-                            OnRemoteFailure = context =>
-                            {
-                                Assert.Contains("custom_error", context.Failure.Message);
-                                Assert.Equal("testvalue", context.Properties.Items["testkey"]);
-                                context.Response.StatusCode = StatusCodes.Status406NotAcceptable;
-                                context.HandleResponse();
-                                return Task.CompletedTask;
-                            }
-                        };
-                    }));
-
-            var transaction = await server.SendAsync("https://www.example.com/oauth-callback?error=custom_error&state=protected_state",
-                ".AspNetCore.Correlation.Weblie.correlationId=N");
-
-            Assert.Equal(HttpStatusCode.NotAcceptable, transaction.Response.StatusCode);
-            Assert.Null(transaction.Response.Headers.Location);
-        }
-
-        private static TestServer CreateServer(Action<IServiceCollection> configureServices, Func<HttpContext, Task<bool>> handler = null)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        if (handler == null || ! await handler(context))
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(configureServices);
-            return new TestServer(builder);
-        }
-
-        private class TestStateDataFormat : ISecureDataFormat<AuthenticationProperties>
-        {
-            private AuthenticationProperties Data { get; set; }
-
-            public string Protect(AuthenticationProperties data)
-            {
-                return "protected_state";
-            }
-
-            public string Protect(AuthenticationProperties data, string purpose)
-            {
-                throw new NotImplementedException();
-            }
-
-            public AuthenticationProperties Unprotect(string protectedText)
-            {
-                Assert.Equal("protected_state", protectedText);
-                var properties = new AuthenticationProperties(new Dictionary<string, string>()
-                {
-                    { ".xsrf", "correlationId" },
-                    { "testkey", "testvalue" }
-                });
-                properties.RedirectUri = "http://testhost/redirect";
-                return properties;
-            }
-
-            public AuthenticationProperties Unprotect(string protectedText, string purpose)
-            {
-                throw new NotImplementedException();
-            }
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/MockOpenIdConnectMessage.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/MockOpenIdConnectMessage.cs
deleted file mode 100644
index 5614fe8fe..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/MockOpenIdConnectMessage.cs
+++ /dev/null
@@ -1,21 +0,0 @@
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    internal class MockOpenIdConnectMessage : OpenIdConnectMessage
-    {
-        public string TestAuthorizeEndpoint { get; set; }
-
-        public string TestLogoutRequest { get; set; }
-
-        public override string CreateAuthenticationRequestUrl()
-        {
-            return TestAuthorizeEndpoint ?? base.CreateAuthenticationRequestUrl();
-        }
-
-        public override string CreateLogoutRequestUrl()
-        {
-            return TestLogoutRequest ?? base.CreateLogoutRequestUrl();
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectChallengeTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectChallengeTests.cs
deleted file mode 100644
index cbafc4622..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectChallengeTests.cs
+++ /dev/null
@@ -1,616 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using System.Net;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.Extensions.Logging.Abstractions;
-using Microsoft.Extensions.Primitives;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Microsoft.Net.Http.Headers;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    public class OpenIdConnectChallengeTests
-    {
-        private static readonly string ChallengeEndpoint = TestServerBuilder.TestHost + TestServerBuilder.Challenge;
-
-        [Fact]
-        public async Task ChallengeRedirectIsIssuedCorrectly()
-        {
-            var settings = new TestSettings(
-                opt =>
-                {
-                    opt.Authority = TestServerBuilder.DefaultAuthority;
-                    opt.AuthenticationMethod = OpenIdConnectRedirectBehavior.RedirectGet;
-                    opt.ClientId = "Test Id";
-                });
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-
-            settings.ValidateChallengeRedirect(
-                res.Headers.Location,
-                OpenIdConnectParameterNames.ClientId,
-                OpenIdConnectParameterNames.ResponseType,
-                OpenIdConnectParameterNames.ResponseMode,
-                OpenIdConnectParameterNames.Scope,
-                OpenIdConnectParameterNames.RedirectUri,
-                OpenIdConnectParameterNames.SkuTelemetry,
-                OpenIdConnectParameterNames.VersionTelemetry);
-        }
-
-        [Fact]
-        public async Task AuthorizationRequestDoesNotIncludeTelemetryParametersWhenDisabled()
-        {
-            var settings = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.DisableTelemetry = true;
-            });
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.DoesNotContain(OpenIdConnectParameterNames.SkuTelemetry, res.Headers.Location.Query);
-            Assert.DoesNotContain(OpenIdConnectParameterNames.VersionTelemetry, res.Headers.Location.Query);
-        }
-
-        /*
-        Example of a form post
-        <body>
-            <form name=\ "form\" method=\ "post\" action=\ "https://login.microsoftonline.com/common/oauth2/authorize\">
-                <input type=\ "hidden\" name=\ "client_id\" value=\ "51e38103-238f-410f-a5d5-61991b203e50\" />
-                <input type=\ "hidden\" name=\ "redirect_uri\" value=\ "https://example.com/signin-oidc\" />
-                <input type=\ "hidden\" name=\ "response_type\" value=\ "id_token\" />
-                <input type=\ "hidden\" name=\ "scope\" value=\ "openid profile\" />
-                <input type=\ "hidden\" name=\ "response_mode\" value=\ "form_post\" />
-                <input type=\ "hidden\" name=\ "nonce\" value=\ "636072461997914230.NTAwOGE1MjQtM2VhYS00ZDU0LWFkYzYtNmZiYWE2MDRkODg3OTlkMDFmOWUtOTMzNC00ZmI2LTg1Y2YtOWM4OTlhNjY0Yjli\" />
-                <input type=\ "hidden\" name=\ "state\" value=\
-                    "CfDJ8Jh1NKaF0T5AnK4qsqzzIs89srKe4iEaBWd29MNph4Ki887QKgkD24wjhZ0ciH-ar6A_jUmRI2O5haXN2-YXbC0ZRuRAvNsx5LqbPTdh4MJBIwXWkG_rM0T0tI3h5Y2pDttWSaku6a_nzFLUYBrKfsE7sDLVoTDrzzOcHrRQhdztqOOeNUuu2wQXaKwlOtNI21ShtN9EVxvSGFOxUUOwVih4nFdF40fBcbsuPpcpCPkLARQaFRJSYsNKiP7pcFMnRwzZhnISHlyGKkzwJ1DIx7nsmdiQFBGljimw5GnYAs-5ru9L3w8NnPjkl96OyQ8MJOcayMDmOY26avs2sYP_Zw0\" />
-                <noscript>Click here to finish the process: <input type=\"submit\" /></noscript>
-            </form>
-            <script>
-                document.form.submit();
-            </script>
-        </body>
-        */
-        [Fact]
-        public async Task ChallengeFormPostIssuedCorrectly()
-        {
-            var settings = new TestSettings(
-                opt =>
-                {
-                    opt.Authority = TestServerBuilder.DefaultAuthority;
-                    opt.AuthenticationMethod = OpenIdConnectRedirectBehavior.FormPost;
-                    opt.ClientId = "Test Id";
-                });
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.OK, res.StatusCode);
-            Assert.Equal("text/html", transaction.Response.Content.Headers.ContentType.MediaType);
-
-            var body = await res.Content.ReadAsStringAsync();
-            settings.ValidateChallengeFormPost(
-                body,
-                OpenIdConnectParameterNames.ClientId,
-                OpenIdConnectParameterNames.ResponseType,
-                OpenIdConnectParameterNames.ResponseMode,
-                OpenIdConnectParameterNames.Scope,
-                OpenIdConnectParameterNames.RedirectUri);
-        }
-
-        [Theory]
-        [InlineData("sample_user_state")]
-        [InlineData(null)]
-        public async Task ChallengeCanSetUserStateThroughProperties(string userState)
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("OIDCTest"));
-            var settings = new TestSettings(o =>
-            {
-                o.ClientId = "Test Id";
-                o.Authority = TestServerBuilder.DefaultAuthority;
-                o.StateDataFormat = stateFormat;
-            });
-
-            var properties = new AuthenticationProperties();
-            properties.Items.Add(OpenIdConnectDefaults.UserstatePropertiesKey, userState);
-
-            var server = settings.CreateTestServer(properties);
-            var transaction = await server.SendAsync(TestServerBuilder.TestHost + TestServerBuilder.ChallengeWithProperties);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-
-            var values = settings.ValidateChallengeRedirect(res.Headers.Location);
-            var actualState = values[OpenIdConnectParameterNames.State];
-            var actualProperties = stateFormat.Unprotect(actualState);
-
-            Assert.Equal(userState ?? string.Empty, actualProperties.Items[OpenIdConnectDefaults.UserstatePropertiesKey]);
-        }
-
-        [Theory]
-        [InlineData("sample_user_state")]
-        [InlineData(null)]
-        public async Task OnRedirectToIdentityProviderEventCanSetState(string userState)
-        {
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("OIDCTest"));
-            var settings = new TestSettings(opt =>
-            {
-                opt.StateDataFormat = stateFormat;
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.Events = new OpenIdConnectEvents()
-                {
-                    OnRedirectToIdentityProvider = context =>
-                    {
-                        context.ProtocolMessage.State = userState;
-                        return Task.FromResult(0);
-                    }
-                };
-            });
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-
-            var values = settings.ValidateChallengeRedirect(res.Headers.Location);
-            var actualState = values[OpenIdConnectParameterNames.State];
-            var actualProperties = stateFormat.Unprotect(actualState);
-
-            if (userState != null)
-            {
-                Assert.Equal(userState, actualProperties.Items[OpenIdConnectDefaults.UserstatePropertiesKey]);
-            }
-            else
-            {
-                Assert.False(actualProperties.Items.ContainsKey(OpenIdConnectDefaults.UserstatePropertiesKey));
-            }
-        }
-
-        [Fact]
-        public async Task OnRedirectToIdentityProviderEventIsHit()
-        {
-            var eventIsHit = false;
-            var settings = new TestSettings(
-                opts =>
-                {
-                    opts.ClientId = "Test Id";
-                    opts.Authority = TestServerBuilder.DefaultAuthority;
-                    opts.Events = new OpenIdConnectEvents()
-                    {
-                        OnRedirectToIdentityProvider = context =>
-                        {
-                            eventIsHit = true;
-                            return Task.FromResult(0);
-                        }
-                    };
-                }
-            );
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            Assert.True(eventIsHit);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-
-            settings.ValidateChallengeRedirect(
-                res.Headers.Location,
-                OpenIdConnectParameterNames.ClientId,
-                OpenIdConnectParameterNames.ResponseType,
-                OpenIdConnectParameterNames.ResponseMode,
-                OpenIdConnectParameterNames.Scope,
-                OpenIdConnectParameterNames.RedirectUri);
-        }
-
-
-        [Fact]
-        public async Task OnRedirectToIdentityProviderEventCanReplaceValues()
-        {
-            var newClientId = Guid.NewGuid().ToString();
-
-            var settings = new TestSettings(
-                opts =>
-                {
-                    opts.ClientId = "Test Id";
-                    opts.Authority = TestServerBuilder.DefaultAuthority;
-                    opts.Events = new OpenIdConnectEvents()
-                    {
-                        OnRedirectToIdentityProvider = context =>
-                        {
-                            context.ProtocolMessage.ClientId = newClientId;
-                            return Task.FromResult(0);
-                        }
-                    };
-                }
-            );
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-
-            settings.ValidateChallengeRedirect(
-                res.Headers.Location,
-                OpenIdConnectParameterNames.ResponseType,
-                OpenIdConnectParameterNames.ResponseMode,
-                OpenIdConnectParameterNames.Scope,
-                OpenIdConnectParameterNames.RedirectUri);
-
-            var actual = res.Headers.Location.Query.Trim('?').Split('&').Single(seg => seg.StartsWith($"{OpenIdConnectParameterNames.ClientId}="));
-            Assert.Equal($"{OpenIdConnectParameterNames.ClientId}={newClientId}", actual);
-        }
-
-        [Fact]
-        public async Task OnRedirectToIdentityProviderEventCanReplaceMessage()
-        {
-            var newMessage = new MockOpenIdConnectMessage
-            {
-                IssuerAddress = "http://example.com/",
-                TestAuthorizeEndpoint = $"http://example.com/{Guid.NewGuid()}/oauth2/signin"
-            };
-
-            var settings = new TestSettings(
-                opts =>
-                {
-                    opts.ClientId = "Test Id";
-                    opts.Authority = TestServerBuilder.DefaultAuthority;
-                    opts.Events = new OpenIdConnectEvents()
-                    {
-                        OnRedirectToIdentityProvider = context =>
-                        {
-                            context.ProtocolMessage = newMessage;
-
-                            return Task.FromResult(0);
-                        }
-                    };
-                }
-            );
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-
-            // The CreateAuthenticationRequestUrl method is overridden MockOpenIdConnectMessage where
-            // query string is not generated and the authorization endpoint is replaced.
-            Assert.Equal(newMessage.TestAuthorizeEndpoint, res.Headers.Location.AbsoluteUri);
-        }
-
-        [Fact]
-        public async Task OnRedirectToIdentityProviderEventHandlesResponse()
-        {
-            var settings = new TestSettings(
-                opts =>
-                {
-                    opts.ClientId = "Test Id";
-                    opts.Authority = TestServerBuilder.DefaultAuthority;
-                    opts.Events = new OpenIdConnectEvents()
-                    {
-                        OnRedirectToIdentityProvider = context =>
-                        {
-                            context.Response.StatusCode = 410;
-                            context.Response.Headers.Add("tea", "Oolong");
-                            context.HandleResponse();
-
-                            return Task.FromResult(0);
-                        }
-                    };
-                }
-            );
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.Gone, res.StatusCode);
-            Assert.Equal("Oolong", res.Headers.GetValues("tea").Single());
-            Assert.Null(res.Headers.Location);
-        }
-
-        // This test can be further refined. When one auth handler skips, the authentication responsibility
-        // will be flowed to the next one. A dummy auth handler can be added to ensure the correct logic.
-        [Fact]
-        public async Task OnRedirectToIdentityProviderEventHandleResponse()
-        {
-            var settings = new TestSettings(
-                opts =>
-                {
-                    opts.ClientId = "Test Id";
-                    opts.Authority = TestServerBuilder.DefaultAuthority;
-                    opts.Events = new OpenIdConnectEvents()
-                    {
-                        OnRedirectToIdentityProvider = context =>
-                        {
-                            context.HandleResponse();
-                            return Task.FromResult(0);
-                        }
-                    };
-                }
-            );
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-            Assert.Equal(HttpStatusCode.OK, res.StatusCode);
-            Assert.Null(res.Headers.Location);
-        }
-
-        [Theory]
-        [InlineData(OpenIdConnectRedirectBehavior.RedirectGet)]
-        [InlineData(OpenIdConnectRedirectBehavior.FormPost)]
-        public async Task ChallengeSetsNonceAndStateCookies(OpenIdConnectRedirectBehavior method)
-        {
-            var settings = new TestSettings(o =>
-            {
-                o.AuthenticationMethod = method;
-                o.ClientId = "Test Id";
-                o.Authority = TestServerBuilder.DefaultAuthority;
-            });
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var challengeCookies = SetCookieHeaderValue.ParseList(transaction.SetCookie);
-            var nonceCookie = challengeCookies.Where(cookie => cookie.Name.StartsWith(OpenIdConnectDefaults.CookieNoncePrefix, StringComparison.Ordinal)).Single();
-            Assert.True(nonceCookie.Expires.HasValue);
-            Assert.True(nonceCookie.Expires > DateTime.UtcNow);
-            Assert.True(nonceCookie.HttpOnly);
-            Assert.Equal("/signin-oidc", nonceCookie.Path);
-            Assert.Equal("N", nonceCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.None, nonceCookie.SameSite);
-
-            var correlationCookie = challengeCookies.Where(cookie => cookie.Name.StartsWith(".AspNetCore.Correlation.", StringComparison.Ordinal)).Single();
-            Assert.True(correlationCookie.Expires.HasValue);
-            Assert.True(nonceCookie.Expires > DateTime.UtcNow);
-            Assert.True(correlationCookie.HttpOnly);
-            Assert.Equal("/signin-oidc", correlationCookie.Path);
-            Assert.False(StringSegment.IsNullOrEmpty(correlationCookie.Value));
-
-            Assert.Equal(2, challengeCookies.Count);
-        }
-
-        [Fact]
-        public async Task Challenge_WithEmptyConfig_Fails()
-        {
-            var settings = new TestSettings(
-                opt =>
-                {
-                    opt.ClientId = "Test Id";
-                    opt.Configuration = new OpenIdConnectConfiguration();
-                });
-
-            var server = settings.CreateTestServer();
-            var exception = await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync(ChallengeEndpoint));
-            Assert.Equal("Cannot redirect to the authorization endpoint, the configuration may be missing or invalid.", exception.Message);
-        }
-
-        [Fact]
-        public async Task Challenge_WithDefaultMaxAge_HasExpectedMaxAgeParam()
-        {
-            var settings = new TestSettings(
-                opt =>
-                {
-                    opt.ClientId = "Test Id";
-                    opt.Authority = TestServerBuilder.DefaultAuthority;
-                });
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(
-                res.Headers.Location,
-                OpenIdConnectParameterNames.MaxAge);
-        }
-
-        [Fact]
-        public async Task Challenge_WithSpecificMaxAge_HasExpectedMaxAgeParam()
-        {
-            var settings = new TestSettings(
-                opt =>
-                {
-                    opt.ClientId = "Test Id";
-                    opt.Authority = TestServerBuilder.DefaultAuthority;
-                    opt.MaxAge = TimeSpan.FromMinutes(20);
-                });
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(
-                res.Headers.Location,
-                OpenIdConnectParameterNames.MaxAge);
-        }
-
-        [Fact]
-        public async Task Challenge_HasExpectedPromptParam()
-        {
-            var settings = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.Prompt = "consent";
-            });
-
-            var server = settings.CreateTestServer();
-            var transaction = await server.SendAsync(ChallengeEndpoint);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(res.Headers.Location, OpenIdConnectParameterNames.Prompt);
-            Assert.Contains("prompt=consent", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task Challenge_HasOverwrittenPromptParam()
-        {
-            var settings = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.Prompt = "consent";
-            });
-            var properties = new OpenIdConnectChallengeProperties()
-            {
-                Prompt = "login",
-            };
-
-            var server = settings.CreateTestServer(properties);
-            var transaction = await server.SendAsync(TestServerBuilder.TestHost + TestServerBuilder.ChallengeWithProperties);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(res.Headers.Location);
-            Assert.Contains("prompt=login", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task Challenge_HasOverwrittenPromptParamFromBaseAuthenticationProperties()
-        {
-            var settings = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.Prompt = "consent";
-            });
-            var properties = new AuthenticationProperties();
-            properties.SetParameter(OpenIdConnectChallengeProperties.PromptKey, "login");
-
-            var server = settings.CreateTestServer(properties);
-            var transaction = await server.SendAsync(TestServerBuilder.TestHost + TestServerBuilder.ChallengeWithProperties);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(res.Headers.Location);
-            Assert.Contains("prompt=login", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task Challenge_HasOverwrittenScopeParam()
-        {
-            var settings = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.Scope.Clear();
-                opt.Scope.Add("foo");
-                opt.Scope.Add("bar");
-            });
-            var properties = new OpenIdConnectChallengeProperties();
-            properties.SetScope("baz", "qux");
-
-            var server = settings.CreateTestServer(properties);
-            var transaction = await server.SendAsync(TestServerBuilder.TestHost + TestServerBuilder.ChallengeWithProperties);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(res.Headers.Location);
-            Assert.Contains("scope=baz%20qux", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task Challenge_HasOverwrittenScopeParamFromBaseAuthenticationProperties()
-        {
-            var settings = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.Scope.Clear();
-                opt.Scope.Add("foo");
-                opt.Scope.Add("bar");
-            });
-            var properties = new AuthenticationProperties();
-            properties.SetParameter(OpenIdConnectChallengeProperties.ScopeKey, new string[] { "baz", "qux" });
-
-            var server = settings.CreateTestServer(properties);
-            var transaction = await server.SendAsync(TestServerBuilder.TestHost + TestServerBuilder.ChallengeWithProperties);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(res.Headers.Location);
-            Assert.Contains("scope=baz%20qux", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task Challenge_HasOverwrittenMaxAgeParam()
-        {
-            var settings = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.MaxAge = TimeSpan.FromSeconds(500);
-            });
-            var properties = new OpenIdConnectChallengeProperties()
-            {
-                MaxAge = TimeSpan.FromSeconds(1234),
-            };
-
-            var server = settings.CreateTestServer(properties);
-            var transaction = await server.SendAsync(TestServerBuilder.TestHost + TestServerBuilder.ChallengeWithProperties);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(res.Headers.Location);
-            Assert.Contains("max_age=1234", res.Headers.Location.Query);
-        }
-
-        [Fact]
-        public async Task Challenge_HasOverwrittenMaxAgeParaFromBaseAuthenticationPropertiesm()
-        {
-            var settings = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Authority = TestServerBuilder.DefaultAuthority;
-                opt.MaxAge = TimeSpan.FromSeconds(500);
-            });
-            var properties = new AuthenticationProperties();
-            properties.SetParameter(OpenIdConnectChallengeProperties.MaxAgeKey, TimeSpan.FromSeconds(1234));
-
-            var server = settings.CreateTestServer(properties);
-            var transaction = await server.SendAsync(TestServerBuilder.TestHost + TestServerBuilder.ChallengeWithProperties);
-
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            settings.ValidateChallengeRedirect(res.Headers.Location);
-            Assert.Contains("max_age=1234", res.Headers.Location.Query);
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectConfigurationTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectConfigurationTests.cs
deleted file mode 100644
index ed368c1ef..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectConfigurationTests.cs
+++ /dev/null
@@ -1,574 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Net;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.Authentication.Tests;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    public class OpenIdConnectConfigurationTests
-    {
-        private void ConfigureDefaults(OpenIdConnectOptions o)
-        {
-            o.Authority = TestServerBuilder.DefaultAuthority;
-            o.ClientId = "Test Id";
-            o.ClientSecret = "Test Secret";
-            o.SignInScheme = "auth1";
-        }
-
-        [Fact]
-        public async Task CanForwardDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler>("auth1", "auth1");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-            });
-
-            var forwardDefault = new TestHandler();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-
-            await context.AuthenticateAsync();
-            Assert.Equal(1, forwardDefault.AuthenticateCount);
-
-            await context.ForbidAsync();
-            Assert.Equal(1, forwardDefault.ForbidCount);
-
-            await context.ChallengeAsync();
-            Assert.Equal(1, forwardDefault.ChallengeCount);
-
-            await context.SignOutAsync();
-            Assert.Equal(1, forwardDefault.SignOutCount);
-
-            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-        }
-
-        [Fact]
-        public async Task ForwardSignInThrows()
-        {
-            var services = new ServiceCollection().AddLogging();
-
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler>("specific", "specific");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-                o.ForwardSignOut = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-        }
-
-        [Fact]
-        public async Task ForwardSignOutWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler>("specific", "specific");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-                o.ForwardSignOut = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.SignOutAsync();
-            Assert.Equal(1, specific.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-        }
-
-        [Fact]
-        public async Task ForwardForbidWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler>("specific", "specific");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-                o.ForwardForbid = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.ForbidAsync();
-            Assert.Equal(0, specific.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(1, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-        }
-
-        [Fact]
-        public async Task ForwardAuthenticateWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler>("specific", "specific");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-                o.ForwardAuthenticate = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.AuthenticateAsync();
-            Assert.Equal(0, specific.SignOutCount);
-            Assert.Equal(1, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-        }
-
-        [Fact]
-        public async Task ForwardChallengeWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler>("specific", "specific");
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-                o.ForwardChallenge = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.ChallengeAsync();
-            Assert.Equal(0, specific.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(1, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-        }
-
-        [Fact]
-        public async Task ForwardSelectorWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler3>("selector", "selector");
-                o.AddScheme<TestHandler>("specific", "specific");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-                o.ForwardDefaultSelector = _ => "selector";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-            var selector = new TestHandler3();
-            services.AddSingleton(selector);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.AuthenticateAsync();
-            Assert.Equal(1, selector.AuthenticateCount);
-
-            await context.ForbidAsync();
-            Assert.Equal(1, selector.ForbidCount);
-
-            await context.ChallengeAsync();
-            Assert.Equal(1, selector.ChallengeCount);
-
-            await context.SignOutAsync();
-            Assert.Equal(1, selector.SignOutCount);
-
-            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-            Assert.Equal(0, specific.SignOutCount);
-        }
-
-        [Fact]
-        public async Task NullForwardSelectorUsesDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler3>("selector", "selector");
-                o.AddScheme<TestHandler>("specific", "specific");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-                o.ForwardDefaultSelector = _ => null;
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-            var selector = new TestHandler3();
-            services.AddSingleton(selector);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.AuthenticateAsync();
-            Assert.Equal(1, forwardDefault.AuthenticateCount);
-
-            await context.ForbidAsync();
-            Assert.Equal(1, forwardDefault.ForbidCount);
-
-            await context.ChallengeAsync();
-            Assert.Equal(1, forwardDefault.ChallengeCount);
-
-            await context.SignOutAsync();
-            Assert.Equal(1, forwardDefault.SignOutCount);
-
-            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-
-            Assert.Equal(0, selector.AuthenticateCount);
-            Assert.Equal(0, selector.ForbidCount);
-            Assert.Equal(0, selector.ChallengeCount);
-            Assert.Equal(0, selector.SignInCount);
-            Assert.Equal(0, selector.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-            Assert.Equal(0, specific.SignOutCount);
-        }
-
-        [Fact]
-        public async Task SpecificForwardWinsOverSelectorAndDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler3>("selector", "selector");
-                o.AddScheme<TestHandler>("specific", "specific");
-            })
-            .AddOpenIdConnect(o =>
-            {
-                ConfigureDefaults(o);
-                o.ForwardDefault = "auth1";
-                o.ForwardDefaultSelector = _ => "selector";
-                o.ForwardAuthenticate = "specific";
-                o.ForwardChallenge = "specific";
-                o.ForwardSignIn = "specific";
-                o.ForwardSignOut = "specific";
-                o.ForwardForbid = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-            var selector = new TestHandler3();
-            services.AddSingleton(selector);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.AuthenticateAsync();
-            Assert.Equal(1, specific.AuthenticateCount);
-
-            await context.ForbidAsync();
-            Assert.Equal(1, specific.ForbidCount);
-
-            await context.ChallengeAsync();
-            Assert.Equal(1, specific.ChallengeCount);
-
-            await context.SignOutAsync();
-            Assert.Equal(1, specific.SignOutCount);
-
-            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-            Assert.Equal(0, selector.AuthenticateCount);
-            Assert.Equal(0, selector.ForbidCount);
-            Assert.Equal(0, selector.ChallengeCount);
-            Assert.Equal(0, selector.SignInCount);
-            Assert.Equal(0, selector.SignOutCount);
-        }
-
-        [Fact]
-        public async Task MetadataAddressIsGeneratedFromAuthorityWhenMissing()
-        {
-            var builder = new WebHostBuilder()
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication()
-                        .AddCookie()
-                        .AddOpenIdConnect(o =>
-                    {
-                        o.Authority = TestServerBuilder.DefaultAuthority;
-                        o.ClientId = Guid.NewGuid().ToString();
-                        o.SignInScheme = Guid.NewGuid().ToString();
-                    });
-                })
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(async context =>
-                    {
-                        var resolver = context.RequestServices.GetRequiredService<IAuthenticationHandlerProvider>();
-                        var handler = await resolver.GetHandlerAsync(context, OpenIdConnectDefaults.AuthenticationScheme) as OpenIdConnectHandler;
-                        Assert.Equal($"{TestServerBuilder.DefaultAuthority}/.well-known/openid-configuration", handler.Options.MetadataAddress);
-                    });
-                });
-            var server = new TestServer(builder);
-            var transaction = await server.SendAsync(@"https://example.com");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public Task ThrowsWhenSignInSchemeIsSetToSelf()
-        {
-            return TestConfigurationException<InvalidOperationException>(
-                o =>
-                {
-                    o.SignInScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                    o.Authority = TestServerBuilder.DefaultAuthority;
-                    o.ClientId = "Test Id";
-                    o.ClientSecret = "Test Secret";
-                },
-                ex => Assert.Contains("cannot be set to itself", ex.Message));
-        }
-
-        [Fact]
-        public Task ThrowsWhenClientIdIsMissing()
-        {
-            return TestConfigurationException<ArgumentException>(
-                o =>
-                {
-                    o.SignInScheme = "TestScheme";
-                    o.Authority = TestServerBuilder.DefaultAuthority;
-                },
-                ex => Assert.Equal("ClientId", ex.ParamName));
-        }
-
-        [Fact]
-        public Task ThrowsWhenAuthorityIsMissing()
-        {
-            return TestConfigurationException<InvalidOperationException>(
-                o =>
-                {
-                    o.SignInScheme = "TestScheme";
-                    o.ClientId = "Test Id";
-                    o.CallbackPath = "/";
-                },
-                ex => Assert.Equal("Provide Authority, MetadataAddress, Configuration, or ConfigurationManager to OpenIdConnectOptions", ex.Message)
-            );
-        }
-
-        [Fact]
-        public Task ThrowsWhenAuthorityIsNotHttps()
-        {
-            return TestConfigurationException<InvalidOperationException>(
-                o =>
-                {
-                    o.SignInScheme = "TestScheme";
-                    o.ClientId = "Test Id";
-                    o.MetadataAddress = "http://example.com";
-                    o.CallbackPath = "/";
-                },
-                ex => Assert.Equal("The MetadataAddress or Authority must use HTTPS unless disabled for development by setting RequireHttpsMetadata=false.", ex.Message)
-            );
-        }
-
-        [Fact]
-        public Task ThrowsWhenMetadataAddressIsNotHttps()
-        {
-            return TestConfigurationException<InvalidOperationException>(
-                o =>
-                {
-                    o.SignInScheme = "TestScheme";
-                    o.ClientId = "Test Id";
-                    o.MetadataAddress = "http://example.com";
-                    o.CallbackPath = "/";
-                },
-                ex => Assert.Equal("The MetadataAddress or Authority must use HTTPS unless disabled for development by setting RequireHttpsMetadata=false.", ex.Message)
-            );
-        }
-
-        [Fact]
-        public Task ThrowsWhenMaxAgeIsNegative()
-        {
-            return TestConfigurationException<ArgumentOutOfRangeException>(
-                o =>
-                {
-                    o.SignInScheme = "TestScheme";
-                    o.ClientId = "Test Id";
-                    o.Authority = TestServerBuilder.DefaultAuthority;
-                    o.MaxAge = TimeSpan.FromSeconds(-1);
-                },
-                ex => Assert.StartsWith("The value must not be a negative TimeSpan.", ex.Message)
-            );
-        }
-
-        private TestServer BuildTestServer(Action<OpenIdConnectOptions> options)
-        {
-            var builder = new WebHostBuilder()
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication()
-                        .AddCookie()
-                        .AddOpenIdConnect(options);
-                })
-                .Configure(app => app.UseAuthentication());
-
-            return new TestServer(builder);
-        }
-
-        private async Task TestConfigurationException<T>(
-            Action<OpenIdConnectOptions> options,
-            Action<T> verifyException)
-            where T : Exception
-        {
-            var exception = await Assert.ThrowsAsync<T>(() => BuildTestServer(options).SendAsync(@"https://example.com"));
-            verifyException(exception);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectEventTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectEventTests.cs
deleted file mode 100644
index 090bf3dec..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectEventTests.cs
+++ /dev/null
@@ -1,1403 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.IdentityModel.Tokens.Jwt;
-using System.Linq;
-using System.Net;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Text;
-using System.Threading;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Primitives;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Microsoft.IdentityModel.Tokens;
-using Microsoft.Net.Http.Headers;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    public class OpenIdConnectEventTests
-    {
-        private readonly RequestDelegate AppWritePath = context => context.Response.WriteAsync(context.Request.Path);
-        private readonly RequestDelegate AppNotImpl = context => { throw new NotImplementedException("App"); };
-
-        [Fact]
-        public async Task OnMessageReceived_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-            };
-            events.OnMessageReceived = context =>
-            {
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnMessageReceived_Fail_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnMessageReceived = context =>
-            {
-                context.Fail("Authentication was aborted from user code.");
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return PostAsync(server, "signin-oidc", "");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnMessageReceived_Handled_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-            };
-            events.OnMessageReceived = context =>
-            {
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenValidated_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenValidated_Fail_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.Fail("Authentication was aborted from user code.");
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenValidated_HandledWithoutTicket_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.HandleResponse();
-                context.Principal = null;
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenValidated_HandledWithTicket_SkipToTicketReceived()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectTicketReceived = true,
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.HandleResponse();
-                context.Principal = null;
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.Success();
-                return Task.FromResult(0);
-            };
-            events.OnTicketReceived = context =>
-            {
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAuthorizationCodeReceived_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-            };
-            events.OnAuthorizationCodeReceived = context =>
-            {
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAuthorizationCodeReceived_Fail_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnAuthorizationCodeReceived = context =>
-            {
-                context.Fail("Authentication was aborted from user code.");
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAuthorizationCodeReceived_HandledWithoutTicket_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-            };
-            events.OnAuthorizationCodeReceived = context =>
-            {
-                context.HandleResponse();
-                context.Principal = null;
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAuthorizationCodeReceived_HandledWithTicket_SkipToTicketReceived()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTicketReceived = true,
-            };
-            events.OnAuthorizationCodeReceived = context =>
-            {
-                context.Success();
-                return Task.FromResult(0);
-            };
-            events.OnTicketReceived = context =>
-            {
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenResponseReceived_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-            };
-            events.OnTokenResponseReceived = context =>
-            {
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenResponseReceived_Fail_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnTokenResponseReceived = context =>
-            {
-                context.Fail("Authentication was aborted from user code.");
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenResponseReceived_HandledWithoutTicket_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-            };
-            events.OnTokenResponseReceived = context =>
-            {
-                context.Principal = null;
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenResponseReceived_HandledWithTicket_SkipToTicketReceived()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectTicketReceived = true,
-            };
-            events.OnTokenResponseReceived = context =>
-            {
-                context.Success();
-                return Task.FromResult(0);
-            };
-            events.OnTicketReceived = context =>
-            {
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenValidatedBackchannel_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenValidatedBackchannel_Fail_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.Fail("Authentication was aborted from user code.");
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return PostAsync(server, "signin-oidc", "state=protected_state&code=my_code");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenValidatedBackchannel_HandledWithoutTicket_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.Principal = null;
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTokenValidatedBackchannel_HandledWithTicket_SkipToTicketReceived()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectTicketReceived = true,
-            };
-            events.OnTokenValidated = context =>
-            {
-                context.Success();
-                return Task.FromResult(0);
-            };
-            events.OnTicketReceived = context =>
-            {
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnUserInformationReceived_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnUserInformationReceived_Fail_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                context.Fail("Authentication was aborted from user code.");
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnUserInformationReceived_HandledWithoutTicket_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                context.Principal = null;
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnUserInformationReceived_HandledWithTicket_SkipToTicketReceived()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectTicketReceived = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                context.Success();
-                return Task.FromResult(0);
-            };
-            events.OnTicketReceived = context =>
-            {
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAuthenticationFailed_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectAuthenticationFailed = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                throw new NotImplementedException("TestException");
-            };
-            events.OnAuthenticationFailed = context =>
-            {
-                Assert.Equal("TestException", context.Exception.Message);
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAuthenticationFailed_Fail_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectAuthenticationFailed = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                throw new NotImplementedException("TestException");
-            };
-            events.OnAuthenticationFailed = context =>
-            {
-                Assert.Equal("TestException", context.Exception.Message);
-                context.Fail("Authentication was aborted from user code.");
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var exception = await Assert.ThrowsAsync<Exception>(delegate
-            {
-                return PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-            });
-
-            Assert.Equal("Authentication was aborted from user code.", exception.InnerException.Message);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAuthenticationFailed_HandledWithoutTicket_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectAuthenticationFailed = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                throw new NotImplementedException("TestException");
-            };
-            events.OnAuthenticationFailed = context =>
-            {
-                Assert.Equal("TestException", context.Exception.Message);
-                Assert.Null(context.Principal);
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAuthenticationFailed_HandledWithTicket_SkipToTicketReceived()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectAuthenticationFailed = true,
-                ExpectTicketReceived = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                throw new NotImplementedException("TestException");
-            };
-            events.OnAuthenticationFailed = context =>
-            {
-                Assert.Equal("TestException", context.Exception.Message);
-                Assert.Null(context.Principal);
-
-                var claims = new[]
-                {
-                    new Claim(ClaimTypes.NameIdentifier, "Bob le Magnifique"),
-                    new Claim(ClaimTypes.Email, "bob@contoso.com"),
-                    new Claim(ClaimsIdentity.DefaultNameClaimType, "bob")
-                };
-
-                context.Principal = new ClaimsPrincipal(new ClaimsIdentity(claims, context.Scheme.Name));
-                context.Success();
-                return Task.FromResult(0);
-            };
-            events.OnTicketReceived = context =>
-            {
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAccessDenied_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectAccessDenied = true
-            };
-            events.OnAccessDenied = context =>
-            {
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "error=access_denied&state=protected_state");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnAccessDenied_Handled_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectAccessDenied = true
-            };
-            events.OnAccessDenied = context =>
-            {
-                Assert.Equal("testvalue", context.Properties.Items["testkey"]);
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "error=access_denied&state=protected_state");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnRemoteFailure_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectAuthenticationFailed = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                throw new NotImplementedException("TestException");
-            };
-            events.OnAuthenticationFailed = context =>
-            {
-                Assert.Equal("TestException", context.Exception.Message);
-                return Task.FromResult(0);
-            };
-            events.OnRemoteFailure = context =>
-            {
-                Assert.Equal("TestException", context.Failure.Message);
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnRemoteFailure_Handled_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectAuthenticationFailed = true,
-                ExpectRemoteFailure = true,
-            };
-            events.OnUserInformationReceived = context =>
-            {
-                throw new NotImplementedException("TestException");
-            };
-            events.OnRemoteFailure = context =>
-            {
-                Assert.Equal("TestException", context.Failure.Message);
-                Assert.Equal("testvalue", context.Properties.Items["testkey"]);
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTicketReceived_Skip_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectTicketReceived = true,
-            };
-            events.OnTicketReceived = context =>
-            {
-                context.SkipHandler();
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppWritePath);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            Assert.Equal("/signin-oidc", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnTicketReceived_Handled_NoMoreEventsRun()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectMessageReceived = true,
-                ExpectTokenValidated = true,
-                ExpectAuthorizationCodeReceived = true,
-                ExpectTokenResponseReceived = true,
-                ExpectUserInfoReceived = true,
-                ExpectTicketReceived = true,
-            };
-            events.OnTicketReceived = context =>
-            {
-                context.HandleResponse();
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.FromResult(0);
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var response = await PostAsync(server, "signin-oidc", "id_token=my_id_token&state=protected_state&code=my_code");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnRedirectToIdentityProviderForSignOut_Invoked()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectRedirectForSignOut = true,
-            };
-            var server = CreateServer(events,
-            context =>
-            {
-                return context.SignOutAsync(OpenIdConnectDefaults.AuthenticationScheme);
-            });
-
-            var client = server.CreateClient();
-            var response = await client.GetAsync("/");
-
-            Assert.Equal(HttpStatusCode.Found, response.StatusCode);
-            Assert.Equal("http://testhost/end", response.Headers.Location.GetLeftPart(UriPartial.Path));
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnRedirectToIdentityProviderForSignOut_Handled_RedirectNotInvoked()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectRedirectForSignOut = true,
-            };
-            events.OnRedirectToIdentityProviderForSignOut = context =>
-            {
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                context.HandleResponse();
-                return Task.CompletedTask;
-            };
-            var server = CreateServer(events,
-            context =>
-            {
-                return context.SignOutAsync(OpenIdConnectDefaults.AuthenticationScheme);
-            });
-
-            var client = server.CreateClient();
-            var response = await client.GetAsync("/");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Null(response.Headers.Location);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnRemoteSignOut_Invoked()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectRemoteSignOut = true,
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var client = server.CreateClient();
-            var response = await client.GetAsync("/signout-oidc");
-
-            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
-            events.ValidateExpectations();
-            Assert.True(response.Headers.TryGetValues(HeaderNames.SetCookie, out var values));
-            Assert.True(SetCookieHeaderValue.TryParseStrictList(values.ToList(), out var parsedValues));
-            Assert.Equal(1, parsedValues.Count);
-            Assert.True(StringSegment.IsNullOrEmpty(parsedValues.Single().Value));
-        }
-
-        [Fact]
-        public async Task OnRemoteSignOut_Handled_NoSignout()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectRemoteSignOut = true,
-            };
-            events.OnRemoteSignOut = context =>
-            {
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                context.HandleResponse();
-                return Task.CompletedTask;
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var client = server.CreateClient();
-            var response = await client.GetAsync("/signout-oidc");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            events.ValidateExpectations();
-            Assert.False(response.Headers.TryGetValues(HeaderNames.SetCookie, out var values));
-        }
-
-        [Fact]
-        public async Task OnRemoteSignOut_Skip_NoSignout()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectRemoteSignOut = true,
-            };
-            events.OnRemoteSignOut = context =>
-            {
-                context.SkipHandler();
-                return Task.CompletedTask;
-            };
-            var server = CreateServer(events, context =>
-            {
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.CompletedTask;
-            });
-
-            var client = server.CreateClient();
-            var response = await client.GetAsync("/signout-oidc");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            events.ValidateExpectations();
-            Assert.False(response.Headers.TryGetValues(HeaderNames.SetCookie, out var values));
-        }
-
-        [Fact]
-        public async Task OnRedirectToSignedOutRedirectUri_Invoked()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectRedirectToSignedOut = true,
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var client = server.CreateClient();
-            var response = await client.GetAsync("/signout-callback-oidc?state=protected_state");
-
-            Assert.Equal(HttpStatusCode.Found, response.StatusCode);
-            Assert.Equal("http://testhost/redirect", response.Headers.Location.AbsoluteUri);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnRedirectToSignedOutRedirectUri_Handled_NoRedirect()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectRedirectToSignedOut = true,
-            };
-            events.OnSignedOutCallbackRedirect = context =>
-            {
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                context.HandleResponse();
-                return Task.CompletedTask;
-            };
-            var server = CreateServer(events, AppNotImpl);
-
-            var client = server.CreateClient();
-            var response = await client.GetAsync("/signout-callback-oidc?state=protected_state");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Null(response.Headers.Location);
-            events.ValidateExpectations();
-        }
-
-        [Fact]
-        public async Task OnRedirectToSignedOutRedirectUri_Skipped_NoRedirect()
-        {
-            var events = new ExpectedOidcEvents()
-            {
-                ExpectRedirectToSignedOut = true,
-            };
-            events.OnSignedOutCallbackRedirect = context =>
-            {
-                context.SkipHandler();
-                return Task.CompletedTask;
-            };
-            var server = CreateServer(events,
-            context =>
-            {
-                context.Response.StatusCode = StatusCodes.Status202Accepted;
-                return Task.CompletedTask;
-            });
-
-            var client = server.CreateClient();
-            var response = await client.GetAsync("/signout-callback-oidc?state=protected_state");
-
-            Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
-            Assert.Null(response.Headers.Location);
-            events.ValidateExpectations();
-        }
-
-        private class ExpectedOidcEvents : OpenIdConnectEvents
-        {
-            public bool ExpectMessageReceived { get; set; }
-            public bool InvokedMessageReceived { get; set; }
-
-            public bool ExpectTokenValidated { get; set; }
-            public bool InvokedTokenValidated { get; set; }
-
-            public bool ExpectAccessDenied { get; set; }
-            public bool InvokedAccessDenied { get; set; }
-
-            public bool ExpectRemoteFailure { get; set; }
-            public bool InvokedRemoteFailure { get; set; }
-
-            public bool ExpectTicketReceived { get; set; }
-            public bool InvokedTicketReceived { get; set; }
-
-            public bool ExpectAuthorizationCodeReceived { get; set; }
-            public bool InvokedAuthorizationCodeReceived { get; set; }
-
-            public bool ExpectTokenResponseReceived { get; set; }
-            public bool InvokedTokenResponseReceived { get; set; }
-
-            public bool ExpectUserInfoReceived { get; set; }
-            public bool InvokedUserInfoReceived { get; set; }
-
-            public bool ExpectAuthenticationFailed { get; set; }
-            public bool InvokeAuthenticationFailed { get; set; }
-
-            public bool ExpectRedirectForSignOut { get; set; }
-            public bool InvokedRedirectForSignOut { get; set; }
-
-            public bool ExpectRemoteSignOut { get; set; }
-            public bool InvokedRemoteSignOut { get; set; }
-
-            public bool ExpectRedirectToSignedOut { get; set; }
-            public bool InvokedRedirectToSignedOut { get; set; }
-
-            public override Task MessageReceived(MessageReceivedContext context)
-            {
-                InvokedMessageReceived = true;
-                return base.MessageReceived(context);
-            }
-
-            public override Task TokenValidated(TokenValidatedContext context)
-            {
-                InvokedTokenValidated = true;
-                return base.TokenValidated(context);
-            }
-
-            public override Task AuthorizationCodeReceived(AuthorizationCodeReceivedContext context)
-            {
-                InvokedAuthorizationCodeReceived = true;
-                return base.AuthorizationCodeReceived(context);
-            }
-
-            public override Task TokenResponseReceived(TokenResponseReceivedContext context)
-            {
-                InvokedTokenResponseReceived = true;
-                return base.TokenResponseReceived(context);
-            }
-
-            public override Task UserInformationReceived(UserInformationReceivedContext context)
-            {
-                InvokedUserInfoReceived = true;
-                return base.UserInformationReceived(context);
-            }
-
-            public override Task AuthenticationFailed(AuthenticationFailedContext context)
-            {
-                InvokeAuthenticationFailed = true;
-                return base.AuthenticationFailed(context);
-            }
-
-            public override Task TicketReceived(TicketReceivedContext context)
-            {
-                InvokedTicketReceived = true;
-                return base.TicketReceived(context);
-            }
-
-            public override Task AccessDenied(AccessDeniedContext context)
-            {
-                InvokedAccessDenied = true;
-                return base.AccessDenied(context);
-            }
-
-            public override Task RemoteFailure(RemoteFailureContext context)
-            {
-                InvokedRemoteFailure = true;
-                return base.RemoteFailure(context);
-            }
-
-            public override Task RedirectToIdentityProviderForSignOut(RedirectContext context)
-            {
-                InvokedRedirectForSignOut = true;
-                return base.RedirectToIdentityProviderForSignOut(context);
-            }
-
-            public override Task RemoteSignOut(RemoteSignOutContext context)
-            {
-                InvokedRemoteSignOut = true;
-                return base.RemoteSignOut(context);
-            }
-
-            public override Task SignedOutCallbackRedirect(RemoteSignOutContext context)
-            {
-                InvokedRedirectToSignedOut = true;
-                return base.SignedOutCallbackRedirect(context);
-            }
-
-            public void ValidateExpectations()
-            {
-                Assert.Equal(ExpectMessageReceived, InvokedMessageReceived);
-                Assert.Equal(ExpectTokenValidated, InvokedTokenValidated);
-                Assert.Equal(ExpectAuthorizationCodeReceived, InvokedAuthorizationCodeReceived);
-                Assert.Equal(ExpectTokenResponseReceived, InvokedTokenResponseReceived);
-                Assert.Equal(ExpectUserInfoReceived, InvokedUserInfoReceived);
-                Assert.Equal(ExpectAuthenticationFailed, InvokeAuthenticationFailed);
-                Assert.Equal(ExpectTicketReceived, InvokedTicketReceived);
-                Assert.Equal(ExpectAccessDenied, InvokedAccessDenied);
-                Assert.Equal(ExpectRemoteFailure, InvokedRemoteFailure);
-                Assert.Equal(ExpectRedirectForSignOut, InvokedRedirectForSignOut);
-                Assert.Equal(ExpectRemoteSignOut, InvokedRemoteSignOut);
-                Assert.Equal(ExpectRedirectToSignedOut, InvokedRedirectToSignedOut);
-            }
-        }
-
-        private TestServer CreateServer(OpenIdConnectEvents events, RequestDelegate appCode)
-        {
-            var builder = new WebHostBuilder()
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication(auth =>
-                    {
-                        auth.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        auth.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
-                    })
-                        .AddCookie()
-                        .AddOpenIdConnect(o =>
-                    {
-                        o.Events = events;
-                        o.ClientId = "ClientId";
-                        o.GetClaimsFromUserInfoEndpoint = true;
-                        o.Configuration = new OpenIdConnectConfiguration()
-                        {
-                            TokenEndpoint = "http://testhost/tokens",
-                            UserInfoEndpoint = "http://testhost/user",
-                            EndSessionEndpoint = "http://testhost/end"
-                        };
-                        o.StateDataFormat = new TestStateDataFormat();
-                        o.SecurityTokenValidator = new TestTokenValidator();
-                        o.ProtocolValidator = new TestProtocolValidator();
-                        o.BackchannelHttpHandler = new TestBackchannel();
-                    });
-                })
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(appCode);
-                });
-
-            return new TestServer(builder);
-        }
-
-        private Task<HttpResponseMessage> PostAsync(TestServer server, string path, string form)
-        {
-            var client = server.CreateClient();
-            var cookie = ".AspNetCore.Correlation." + OpenIdConnectDefaults.AuthenticationScheme + ".correlationId=N";
-            client.DefaultRequestHeaders.Add("Cookie", cookie);
-            return client.PostAsync("signin-oidc",
-                new StringContent(form, Encoding.ASCII, "application/x-www-form-urlencoded"));
-        }
-
-        private class TestStateDataFormat : ISecureDataFormat<AuthenticationProperties>
-        {
-            private AuthenticationProperties Data { get; set; }
-
-            public string Protect(AuthenticationProperties data)
-            {
-                return "protected_state";
-            }
-
-            public string Protect(AuthenticationProperties data, string purpose)
-            {
-                throw new NotImplementedException();
-            }
-
-            public AuthenticationProperties Unprotect(string protectedText)
-            {
-                Assert.Equal("protected_state", protectedText);
-                var properties = new AuthenticationProperties(new Dictionary<string, string>()
-                {
-                    { ".xsrf", "correlationId" },
-                    { OpenIdConnectDefaults.RedirectUriForCodePropertiesKey, "redirect_uri" },
-                    { "testkey", "testvalue" }
-                });
-                properties.RedirectUri = "http://testhost/redirect";
-                return properties;
-            }
-
-            public AuthenticationProperties Unprotect(string protectedText, string purpose)
-            {
-                throw new NotImplementedException();
-            }
-        }
-
-        private class TestTokenValidator : ISecurityTokenValidator
-        {
-            public bool CanValidateToken => true;
-
-            public int MaximumTokenSizeInBytes
-            {
-                get { return 1024; }
-                set { throw new NotImplementedException(); }
-            }
-
-            public bool CanReadToken(string securityToken)
-            {
-                Assert.Equal("my_id_token", securityToken);
-                return true;
-            }
-
-            public ClaimsPrincipal ValidateToken(string securityToken, TokenValidationParameters validationParameters, out SecurityToken validatedToken)
-            {
-                Assert.Equal("my_id_token", securityToken);
-                validatedToken = new JwtSecurityToken();
-                return new ClaimsPrincipal(new ClaimsIdentity("customAuthType"));
-            }
-        }
-
-        private class TestProtocolValidator : OpenIdConnectProtocolValidator
-        {
-            public override void ValidateAuthenticationResponse(OpenIdConnectProtocolValidationContext validationContext)
-            {
-            }
-
-            public override void ValidateTokenResponse(OpenIdConnectProtocolValidationContext validationContext)
-            {
-            }
-
-            public override void ValidateUserInfoResponse(OpenIdConnectProtocolValidationContext validationContext)
-            {
-            }
-        }
-
-        private class TestBackchannel : HttpMessageHandler
-        {
-            protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
-            {
-                if (string.Equals("/tokens", request.RequestUri.AbsolutePath, StringComparison.Ordinal))
-                {
-                    return Task.FromResult(new HttpResponseMessage() { Content =
-                       new StringContent("{ \"id_token\": \"my_id_token\", \"access_token\": \"my_access_token\" }", Encoding.ASCII, "application/json") });
-                }
-                if (string.Equals("/user", request.RequestUri.AbsolutePath, StringComparison.Ordinal))
-                {
-                    return Task.FromResult(new HttpResponseMessage() { Content = new StringContent("{ }", Encoding.ASCII, "application/json") });
-                }
-
-                throw new NotImplementedException(request.RequestUri.ToString());
-            }
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectTests.cs
deleted file mode 100644
index da52e0e4c..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/OpenIdConnectTests.cs
+++ /dev/null
@@ -1,351 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Globalization;
-using System.Linq;
-using System.Net;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.Extensions.Logging.Abstractions;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    public class OpenIdConnectTests
-    {
-        static string noncePrefix = "OpenIdConnect." + "Nonce.";
-        static string nonceDelimiter = ".";
-        const string DefaultHost = @"https://example.com";
-        const string Logout = "/logout";
-        const string Signin = "/signin";
-        const string Signout = "/signout";
-
-        /// <summary>
-        /// Tests RedirectForSignOutContext replaces the OpenIdConnectMesssage correctly.
-        /// </summary>
-        /// <returns>Task</returns>
-        [Fact]
-        public async Task SignOutSettingMessage()
-        {
-            var setting = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                opt.Configuration = new OpenIdConnectConfiguration
-                {
-                    EndSessionEndpoint = "https://example.com/signout_test/signout_request"
-                };
-            });
-
-            var server = setting.CreateTestServer();
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Signout);
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-
-            setting.ValidateSignoutRedirect(
-                transaction.Response.Headers.Location,
-                OpenIdConnectParameterNames.SkuTelemetry,
-                OpenIdConnectParameterNames.VersionTelemetry);
-        }
-
-        [Fact]
-        public async Task RedirectToIdentityProvider_SetsNonceCookiePath_ToCallBackPath()
-        {
-            var setting = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                opt.Configuration = new OpenIdConnectConfiguration
-                {
-                    AuthorizationEndpoint = "https://example.com/provider/login"
-                };
-            });
-
-            var server = setting.CreateTestServer();
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Challenge);
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-            var setCookie = Assert.Single(res.Headers, h => h.Key == "Set-Cookie");
-            var nonce = Assert.Single(setCookie.Value, v => v.StartsWith(OpenIdConnectDefaults.CookieNoncePrefix));
-            Assert.Contains("path=/signin-oidc", nonce);
-        }
-
-        [Fact]
-        public async Task RedirectToIdentityProvider_NonceCookieOptions_CanBeOverriden()
-        {
-            var setting = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                opt.Configuration = new OpenIdConnectConfiguration
-                {
-                    AuthorizationEndpoint = "https://example.com/provider/login"
-                };
-                opt.NonceCookie.Path = "/";
-            });
-
-            var server = setting.CreateTestServer();
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Challenge);
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-            var setCookie = Assert.Single(res.Headers, h => h.Key == "Set-Cookie");
-            var nonce = Assert.Single(setCookie.Value, v => v.StartsWith(OpenIdConnectDefaults.CookieNoncePrefix));
-            Assert.Contains("path=/", nonce);
-        }
-
-        [Fact]
-        public async Task RedirectToIdentityProvider_SetsCorrelationIdCookiePath_ToCallBackPath()
-        {
-            var setting = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                opt.Configuration = new OpenIdConnectConfiguration
-                {
-                    AuthorizationEndpoint = "https://example.com/provider/login"
-                };
-            });
-
-            var server = setting.CreateTestServer();
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Challenge);
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-            var setCookie = Assert.Single(res.Headers, h => h.Key == "Set-Cookie");
-            var correlation = Assert.Single(setCookie.Value, v => v.StartsWith(".AspNetCore.Correlation."));
-            Assert.Contains("path=/signin-oidc", correlation);
-        }
-
-        [Fact]
-        public async Task RedirectToIdentityProvider_CorrelationIdCookieOptions_CanBeOverriden()
-        {
-            var setting = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                opt.Configuration = new OpenIdConnectConfiguration
-                {
-                    AuthorizationEndpoint = "https://example.com/provider/login"
-                };
-                opt.CorrelationCookie.Path = "/";
-            });
-
-            var server = setting.CreateTestServer();
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Challenge);
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.NotNull(res.Headers.Location);
-            var setCookie = Assert.Single(res.Headers, h => h.Key == "Set-Cookie");
-            var correlation = Assert.Single(setCookie.Value, v => v.StartsWith(".AspNetCore.Correlation."));
-            Assert.Contains("path=/", correlation);
-        }
-
-        [Fact]
-        public async Task EndSessionRequestDoesNotIncludeTelemetryParametersWhenDisabled()
-        {
-            var configuration = TestServerBuilder.CreateDefaultOpenIdConnectConfiguration();
-            var setting = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Configuration = configuration;
-                opt.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                opt.DisableTelemetry = true;
-            });
-
-            var server = setting.CreateTestServer();
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Signout);
-            var res = transaction.Response;
-
-            Assert.Equal(HttpStatusCode.Redirect, res.StatusCode);
-            Assert.DoesNotContain(OpenIdConnectParameterNames.SkuTelemetry, res.Headers.Location.Query);
-            Assert.DoesNotContain(OpenIdConnectParameterNames.VersionTelemetry, res.Headers.Location.Query);
-            setting.ValidateSignoutRedirect(transaction.Response.Headers.Location);
-        }
-
-        [Fact]
-        public async Task SignOutFormPostWithDefaultRedirectUri()
-        {
-            var settings = new TestSettings(o =>
-            {
-                o.AuthenticationMethod = OpenIdConnectRedirectBehavior.FormPost;
-                o.Authority = TestServerBuilder.DefaultAuthority;
-                o.ClientId = "Test Id";
-            });
-            var server = settings.CreateTestServer();
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Signout);
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-
-            settings.ValidateSignoutFormPost(transaction,
-                OpenIdConnectParameterNames.PostLogoutRedirectUri);
-        }
-
-        [Fact]
-        public async Task SignOutRedirectWithDefaultRedirectUri()
-        {
-            var settings = new TestSettings(o =>
-            {
-                o.AuthenticationMethod = OpenIdConnectRedirectBehavior.RedirectGet;
-                o.Authority = TestServerBuilder.DefaultAuthority;
-                o.ClientId = "Test Id";
-            });
-            var server = settings.CreateTestServer();
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Signout);
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            settings.ValidateSignoutRedirect(transaction.Response.Headers.Location,
-                OpenIdConnectParameterNames.PostLogoutRedirectUri);
-        }
-
-        [Fact]
-        public async Task SignOutWithCustomRedirectUri()
-        {
-            var configuration = TestServerBuilder.CreateDefaultOpenIdConnectConfiguration();
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("OIDCTest"));
-            var server = TestServerBuilder.CreateServer(o =>
-            {
-                o.Authority = TestServerBuilder.DefaultAuthority;
-                o.ClientId = "Test Id";
-                o.Configuration = configuration;
-                o.StateDataFormat = stateFormat;
-                o.SignedOutCallbackPath = "/thelogout";
-                o.SignedOutRedirectUri = "https://example.com/postlogout";
-            });
-
-            var transaction = await server.SendAsync(DefaultHost + TestServerBuilder.Signout);
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            var query = transaction.Response.Headers.Location.Query.Substring(1).Split('&')
-                                   .Select(each => each.Split('='))
-                                   .ToDictionary(pair => pair[0], pair => pair[1]);
-
-            string redirectUri;
-            Assert.True(query.TryGetValue("post_logout_redirect_uri", out redirectUri));
-            Assert.Equal(UrlEncoder.Default.Encode("https://example.com/thelogout"), redirectUri, true);
-
-            string state;
-            Assert.True(query.TryGetValue("state", out state));
-            var properties = stateFormat.Unprotect(state);
-            Assert.Equal("https://example.com/postlogout", properties.RedirectUri, true);
-        }
-
-        [Fact]
-        public async Task SignOutWith_Specific_RedirectUri_From_Authentication_Properites()
-        {
-            var configuration = TestServerBuilder.CreateDefaultOpenIdConnectConfiguration();
-            var stateFormat = new PropertiesDataFormat(new EphemeralDataProtectionProvider(NullLoggerFactory.Instance).CreateProtector("OIDCTest"));
-            var server = TestServerBuilder.CreateServer(o =>
-            {
-                o.Authority = TestServerBuilder.DefaultAuthority;
-                o.StateDataFormat = stateFormat;
-                o.ClientId = "Test Id";
-                o.Configuration = configuration;
-                o.SignedOutRedirectUri = "https://example.com/postlogout";
-            });
-
-            var transaction = await server.SendAsync("https://example.com/signout_with_specific_redirect_uri");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-
-            var query = transaction.Response.Headers.Location.Query.Substring(1).Split('&')
-                                   .Select(each => each.Split('='))
-                                   .ToDictionary(pair => pair[0], pair => pair[1]);
-
-            string redirectUri;
-            Assert.True(query.TryGetValue("post_logout_redirect_uri", out redirectUri));
-            Assert.Equal(UrlEncoder.Default.Encode("https://example.com/signout-callback-oidc"), redirectUri, true);
-
-            string state;
-            Assert.True(query.TryGetValue("state", out state));
-            var properties = stateFormat.Unprotect(state);
-            Assert.Equal("http://www.example.com/specific_redirect_uri", properties.RedirectUri, true);
-        }
-
-        [Fact]
-        public async Task SignOut_WithMissingConfig_Throws()
-        {
-            var setting = new TestSettings(opt =>
-            {
-                opt.ClientId = "Test Id";
-                opt.Configuration = new OpenIdConnectConfiguration();
-            });
-            var server = setting.CreateTestServer();
-
-            var exception = await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync(DefaultHost + TestServerBuilder.Signout));
-            Assert.Equal("Cannot redirect to the end session endpoint, the configuration may be missing or invalid.", exception.Message);
-        }
-
-        // Test Cases for calculating the expiration time of cookie from cookie name
-        [Fact]
-        public void NonceCookieExpirationTime()
-        {
-            DateTime utcNow = DateTime.UtcNow;
-
-            Assert.Equal(DateTime.MaxValue, GetNonceExpirationTime(noncePrefix + DateTime.MaxValue.Ticks.ToString(CultureInfo.InvariantCulture) + nonceDelimiter, TimeSpan.FromHours(1)));
-
-            Assert.Equal(DateTime.MinValue + TimeSpan.FromHours(1), GetNonceExpirationTime(noncePrefix + DateTime.MinValue.Ticks.ToString(CultureInfo.InvariantCulture) + nonceDelimiter, TimeSpan.FromHours(1)));
-
-            Assert.Equal(utcNow + TimeSpan.FromHours(1), GetNonceExpirationTime(noncePrefix + utcNow.Ticks.ToString(CultureInfo.InvariantCulture) + nonceDelimiter, TimeSpan.FromHours(1)));
-
-            Assert.Equal(DateTime.MinValue, GetNonceExpirationTime(noncePrefix, TimeSpan.FromHours(1)));
-
-            Assert.Equal(DateTime.MinValue, GetNonceExpirationTime("", TimeSpan.FromHours(1)));
-
-            Assert.Equal(DateTime.MinValue, GetNonceExpirationTime(noncePrefix + noncePrefix, TimeSpan.FromHours(1)));
-
-            Assert.Equal(utcNow + TimeSpan.FromHours(1), GetNonceExpirationTime(noncePrefix + utcNow.Ticks.ToString(CultureInfo.InvariantCulture) + nonceDelimiter + utcNow.Ticks.ToString(CultureInfo.InvariantCulture) + nonceDelimiter, TimeSpan.FromHours(1)));
-
-            Assert.Equal(DateTime.MinValue, GetNonceExpirationTime(utcNow.Ticks.ToString(CultureInfo.InvariantCulture) + nonceDelimiter + utcNow.Ticks.ToString(CultureInfo.InvariantCulture) + nonceDelimiter, TimeSpan.FromHours(1)));
-        }
-
-        private static DateTime GetNonceExpirationTime(string keyname, TimeSpan nonceLifetime)
-        {
-            DateTime nonceTime = DateTime.MinValue;
-            string timestamp = null;
-            int endOfTimestamp;
-            if (keyname.StartsWith(noncePrefix, StringComparison.Ordinal))
-            {
-                timestamp = keyname.Substring(noncePrefix.Length);
-                endOfTimestamp = timestamp.IndexOf('.');
-
-                if (endOfTimestamp != -1)
-                {
-                    timestamp = timestamp.Substring(0, endOfTimestamp);
-                    try
-                    {
-                        nonceTime = DateTime.FromBinary(Convert.ToInt64(timestamp, CultureInfo.InvariantCulture));
-                        if ((nonceTime >= DateTime.UtcNow) && ((DateTime.MaxValue - nonceTime) < nonceLifetime))
-                            nonceTime = DateTime.MaxValue;
-                        else
-                            nonceTime += nonceLifetime;
-                    }
-                    catch
-                    {
-                    }
-                }
-            }
-
-            return nonceTime;
-        }
-
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestServerBuilder.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestServerBuilder.cs
deleted file mode 100644
index c37da8c04..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestServerBuilder.cs
+++ /dev/null
@@ -1,120 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.IdentityModel.Protocols;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    internal class TestServerBuilder
-    {
-        public static readonly string DefaultAuthority = @"https://login.microsoftonline.com/common";
-        public static readonly string TestHost = @"https://example.com";
-        public static readonly string Challenge = "/challenge";
-        public static readonly string ChallengeWithOutContext = "/challengeWithOutContext";
-        public static readonly string ChallengeWithProperties = "/challengeWithProperties";
-        public static readonly string Signin = "/signin";
-        public static readonly string Signout = "/signout";
-
-        public static OpenIdConnectOptions CreateOpenIdConnectOptions() =>
-            new OpenIdConnectOptions
-            {
-                Authority = DefaultAuthority,
-                ClientId = Guid.NewGuid().ToString(),
-                Configuration = CreateDefaultOpenIdConnectConfiguration()
-            };
-
-        public static OpenIdConnectOptions CreateOpenIdConnectOptions(Action<OpenIdConnectOptions> update)
-        {
-            var options = CreateOpenIdConnectOptions();
-            update?.Invoke(options);
-            return options;
-        }
-
-        public static OpenIdConnectConfiguration CreateDefaultOpenIdConnectConfiguration() =>
-            new OpenIdConnectConfiguration()
-            {
-                AuthorizationEndpoint = DefaultAuthority + "/oauth2/authorize",
-                EndSessionEndpoint = DefaultAuthority + "/oauth2/endsessionendpoint",
-                TokenEndpoint = DefaultAuthority + "/oauth2/token"
-            };
-
-        public static IConfigurationManager<OpenIdConnectConfiguration> CreateDefaultOpenIdConnectConfigurationManager() =>
-            new StaticConfigurationManager<OpenIdConnectConfiguration>(CreateDefaultOpenIdConnectConfiguration());
-
-        public static TestServer CreateServer(Action<OpenIdConnectOptions> options)
-        {
-            return CreateServer(options, handler: null, properties: null);
-        }
-
-        public static TestServer CreateServer(
-            Action<OpenIdConnectOptions> options,
-            Func<HttpContext, Task> handler,
-            AuthenticationProperties properties)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        var req = context.Request;
-                        var res = context.Response;
-
-                        if (req.Path == new PathString(Challenge))
-                        {
-                            await context.ChallengeAsync(OpenIdConnectDefaults.AuthenticationScheme);
-                        }
-                        else if (req.Path == new PathString(ChallengeWithProperties))
-                        {
-                            await context.ChallengeAsync(OpenIdConnectDefaults.AuthenticationScheme, properties);
-                        }
-                        else if (req.Path == new PathString(ChallengeWithOutContext))
-                        {
-                            res.StatusCode = 401;
-                        }
-                        else if (req.Path == new PathString(Signin))
-                        {
-                            await context.SignInAsync(OpenIdConnectDefaults.AuthenticationScheme, new ClaimsPrincipal());
-                        }
-                        else if (req.Path == new PathString(Signout))
-                        {
-                            await context.SignOutAsync(OpenIdConnectDefaults.AuthenticationScheme);
-                        }
-                        else if (req.Path == new PathString("/signout_with_specific_redirect_uri"))
-                        {
-                            await context.SignOutAsync(
-                                OpenIdConnectDefaults.AuthenticationScheme,
-                                new AuthenticationProperties() { RedirectUri = "http://www.example.com/specific_redirect_uri" });
-                        }
-                        else if (handler != null)
-                        {
-                            await handler(context);
-                        }
-                        else
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
-                        .AddCookie()
-                        .AddOpenIdConnect(options);
-                });
-
-            return new TestServer(builder);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestServerExtensions.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestServerExtensions.cs
deleted file mode 100644
index 609aed6f6..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestServerExtensions.cs
+++ /dev/null
@@ -1,49 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Linq;
-using System.Net.Http;
-using System.Threading.Tasks;
-using System.Xml.Linq;
-using Microsoft.AspNetCore.TestHost;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    internal static class TestServerExtensions
-    {
-        public static Task<TestTransaction> SendAsync(this TestServer server, string url)
-        {
-            return SendAsync(server, url, cookieHeader: null);
-        }
-
-        public static async Task<TestTransaction> SendAsync(this TestServer server, string uri, string cookieHeader)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, uri);
-            if (!string.IsNullOrEmpty(cookieHeader))
-            {
-                request.Headers.Add("Cookie", cookieHeader);
-            }
-
-            var transaction = new TestTransaction
-            {
-                Request = request,
-                Response = await server.CreateClient().SendAsync(request),
-            };
-
-            if (transaction.Response.Headers.Contains("Set-Cookie"))
-            {
-                transaction.SetCookie = transaction.Response.Headers.GetValues("Set-Cookie").ToList();
-            }
-
-            transaction.ResponseText = await transaction.Response.Content.ReadAsStringAsync();
-            if (transaction.Response.Content != null &&
-                transaction.Response.Content.Headers.ContentType != null &&
-                transaction.Response.Content.Headers.ContentType.MediaType == "text/xml")
-            {
-                transaction.ResponseElement = XElement.Parse(transaction.ResponseText);
-            }
-
-            return transaction;
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestSettings.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestSettings.cs
deleted file mode 100644
index eb045b438..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestSettings.cs
+++ /dev/null
@@ -1,350 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Diagnostics;
-using System.IO;
-using System.Linq;
-using System.Net.Http;
-using System.Reflection;
-using System.Text;
-using System.Text.Encodings.Web;
-using System.Threading;
-using System.Threading.Tasks;
-using System.Xml.Linq;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.IdentityModel.Protocols.OpenIdConnect;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    /// <summary>
-    /// This helper class is used to check that query string parameters are as expected.
-    /// </summary>
-    internal class TestSettings
-    {
-        private readonly Action<OpenIdConnectOptions> _configureOptions;
-        private OpenIdConnectOptions _options;
-
-        public TestSettings() : this(configure: null)
-        {
-        }
-
-        public TestSettings(Action<OpenIdConnectOptions> configure)
-        {
-            _configureOptions = o =>
-            {
-                configure?.Invoke(o);
-                _options = o;
-                _options.BackchannelHttpHandler = new MockBackchannel();
-            };
-        }
-
-        public UrlEncoder Encoder => UrlEncoder.Default;
-
-        public string ExpectedState { get; set; }
-
-        public TestServer CreateTestServer(AuthenticationProperties properties = null) => TestServerBuilder.CreateServer(_configureOptions, handler: null, properties: properties);
-
-        public IDictionary<string, string> ValidateChallengeFormPost(string responseBody, params string[] parametersToValidate)
-        {
-            IDictionary<string, string> formInputs = null;
-            var errors = new List<string>();
-            var xdoc = XDocument.Parse(responseBody.Replace("doctype", "DOCTYPE"));
-            var forms = xdoc.Descendants("form");
-            if (forms.Count() != 1)
-            {
-                errors.Add("Only one form element is expected in response body.");
-            }
-            else
-            {
-                formInputs = forms.Single()
-                                  .Elements("input")
-                                  .ToDictionary(elem => elem.Attribute("name").Value,
-                                                elem => elem.Attribute("value").Value);
-
-                ValidateParameters(formInputs, parametersToValidate, errors, htmlEncoded: false);
-            }
-
-            if (errors.Any())
-            {
-                var buf = new StringBuilder();
-                buf.AppendLine($"The challenge form post is not valid.");
-                // buf.AppendLine();
-
-                foreach (var error in errors)
-                {
-                    buf.AppendLine(error);
-                }
-
-                Debug.WriteLine(buf.ToString());
-                Assert.True(false, buf.ToString());
-            }
-
-            return formInputs;
-        }
-
-        public IDictionary<string, string> ValidateSignoutFormPost(TestTransaction transaction, params string[] parametersToValidate)
-        {
-            IDictionary<string, string> formInputs = null;
-            var errors = new List<string>();
-            var xdoc = XDocument.Parse(transaction.ResponseText.Replace("doctype", "DOCTYPE"));
-            var forms = xdoc.Descendants("form");
-            if (forms.Count() != 1)
-            {
-                errors.Add("Only one form element is expected in response body.");
-            }
-            else
-            {
-                formInputs = forms.Single()
-                                  .Elements("input")
-                                  .ToDictionary(elem => elem.Attribute("name").Value,
-                                                elem => elem.Attribute("value").Value);
-
-                ValidateParameters(formInputs, parametersToValidate, errors, htmlEncoded: false);
-            }
-
-            if (errors.Any())
-            {
-                var buf = new StringBuilder();
-                buf.AppendLine($"The signout form post is not valid.");
-                // buf.AppendLine();
-
-                foreach (var error in errors)
-                {
-                    buf.AppendLine(error);
-                }
-
-                Debug.WriteLine(buf.ToString());
-                Assert.True(false, buf.ToString());
-            }
-
-            return formInputs;
-        }
-
-        public IDictionary<string, string> ValidateChallengeRedirect(Uri redirectUri, params string[] parametersToValidate) =>
-            ValidateRedirectCore(redirectUri, OpenIdConnectRequestType.Authentication, parametersToValidate);
-
-        public IDictionary<string, string> ValidateSignoutRedirect(Uri redirectUri, params string[] parametersToValidate) =>
-            ValidateRedirectCore(redirectUri, OpenIdConnectRequestType.Logout, parametersToValidate);
-
-        private IDictionary<string, string> ValidateRedirectCore(Uri redirectUri, OpenIdConnectRequestType requestType, string[] parametersToValidate)
-        {
-            var errors = new List<string>();
-
-            // Validate the authority
-            ValidateExpectedAuthority(redirectUri.AbsoluteUri, errors, requestType);
-
-            // Convert query to dictionary
-            var queryDict = string.IsNullOrEmpty(redirectUri.Query) ?
-                new Dictionary<string, string>() :
-                redirectUri.Query.TrimStart('?').Split('&').Select(part => part.Split('=')).ToDictionary(parts => parts[0], parts => parts[1]);
-
-            // Validate the query string parameters
-            ValidateParameters(queryDict, parametersToValidate, errors, htmlEncoded: true);
-
-            if (errors.Any())
-            {
-                var buf = new StringBuilder();
-                buf.AppendLine($"The redirect uri is not valid.");
-                buf.AppendLine(redirectUri.AbsoluteUri);
-
-                foreach (var error in errors)
-                {
-                    buf.AppendLine(error);
-                }
-
-                Debug.WriteLine(buf.ToString());
-                Assert.True(false, buf.ToString());
-            }
-
-            return queryDict;
-        }
-
-        private void ValidateParameters(
-            IDictionary<string, string> actualValues,
-            IEnumerable<string> parametersToValidate,
-            ICollection<string> errors,
-            bool htmlEncoded)
-        {
-            foreach (var paramToValidate in parametersToValidate)
-            {
-                switch (paramToValidate)
-                {
-                    case OpenIdConnectParameterNames.ClientId:
-                        ValidateClientId(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.ResponseType:
-                        ValidateResponseType(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.ResponseMode:
-                        ValidateResponseMode(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.Scope:
-                        ValidateScope(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.RedirectUri:
-                        ValidateRedirectUri(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.Resource:
-                        ValidateResource(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.State:
-                        ValidateState(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.SkuTelemetry:
-                        ValidateSkuTelemetry(actualValues, errors);
-                        break;
-                    case OpenIdConnectParameterNames.VersionTelemetry:
-                        ValidateVersionTelemetry(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.PostLogoutRedirectUri:
-                        ValidatePostLogoutRedirectUri(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.MaxAge:
-                        ValidateMaxAge(actualValues, errors, htmlEncoded);
-                        break;
-                    case OpenIdConnectParameterNames.Prompt:
-                        ValidatePrompt(actualValues, errors, htmlEncoded);
-                        break;
-                    default:
-                        throw new InvalidOperationException($"Unknown parameter \"{paramToValidate}\".");
-                }
-            }
-        }
-
-        private void ValidateExpectedAuthority(string absoluteUri, ICollection<string> errors, OpenIdConnectRequestType requestType)
-        {
-            string expectedAuthority;
-            switch (requestType)
-            {
-                case OpenIdConnectRequestType.Token:
-                    expectedAuthority = _options.Configuration?.TokenEndpoint ?? _options.Authority + @"/oauth2/token";
-                    break;
-                case OpenIdConnectRequestType.Logout:
-                    expectedAuthority = _options.Configuration?.EndSessionEndpoint ?? _options.Authority + @"/oauth2/logout";
-                    break;
-                default:
-                    expectedAuthority = _options.Configuration?.AuthorizationEndpoint ?? _options.Authority + @"/oauth2/authorize";
-                    break;
-            }
-
-            if (!absoluteUri.StartsWith(expectedAuthority))
-            {
-                errors.Add($"ExpectedAuthority: {expectedAuthority}");
-            }
-        }
-
-        private void ValidateClientId(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.ClientId, _options.ClientId, actualParams, errors, htmlEncoded);
-
-        private void ValidateResponseType(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.ResponseType, _options.ResponseType, actualParams, errors, htmlEncoded);
-
-        private void ValidateResponseMode(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.ResponseMode, _options.ResponseMode, actualParams, errors, htmlEncoded);
-
-        private void ValidateScope(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.Scope, string.Join(" ", _options.Scope), actualParams, errors, htmlEncoded);
-
-        private void ValidateRedirectUri(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.RedirectUri, TestServerBuilder.TestHost + _options.CallbackPath, actualParams, errors, htmlEncoded);
-
-        private void ValidateResource(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.RedirectUri, _options.Resource, actualParams, errors, htmlEncoded);
-
-        private void ValidateState(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.State, ExpectedState, actualParams, errors, htmlEncoded);
-
-        private static void ValidateSkuTelemetry(IDictionary<string, string> actualParams, ICollection<string> errors)
-        {
-            if (!actualParams.ContainsKey(OpenIdConnectParameterNames.SkuTelemetry))
-            {
-                errors.Add($"Parameter {OpenIdConnectParameterNames.SkuTelemetry} is missing");
-            }
-        }
-
-        private void ValidateVersionTelemetry(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.VersionTelemetry, typeof(OpenIdConnectMessage).GetTypeInfo().Assembly.GetName().Version.ToString(), actualParams, errors, htmlEncoded);
-
-        private void ValidatePostLogoutRedirectUri(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.PostLogoutRedirectUri, "https://example.com/signout-callback-oidc", actualParams, errors, htmlEncoded);
-
-        private void ValidateMaxAge(IDictionary<string, string> actualQuery, ICollection<string> errors, bool htmlEncoded)
-        {
-            if(_options.MaxAge.HasValue)
-            {
-                Assert.Equal(TimeSpan.FromMinutes(20), _options.MaxAge.Value);
-                string expectedMaxAge = "1200";
-                ValidateParameter(OpenIdConnectParameterNames.MaxAge, expectedMaxAge, actualQuery, errors, htmlEncoded);
-            }
-            else if(actualQuery.ContainsKey(OpenIdConnectParameterNames.MaxAge))
-            {
-                errors.Add($"Parameter {OpenIdConnectParameterNames.MaxAge} is present but it should be absent");
-            }
-        }
-
-        private void ValidatePrompt(IDictionary<string, string> actualParams, ICollection<string> errors, bool htmlEncoded) =>
-            ValidateParameter(OpenIdConnectParameterNames.Prompt, _options.Prompt, actualParams, errors, htmlEncoded);
-
-        private void ValidateParameter(
-            string parameterName,
-            string expectedValue,
-            IDictionary<string, string> actualParams,
-            ICollection<string> errors,
-            bool htmlEncoded)
-        {
-            string actualValue;
-            if (actualParams.TryGetValue(parameterName, out actualValue))
-            {
-                if (htmlEncoded)
-                {
-                    expectedValue = Encoder.Encode(expectedValue);
-                }
-
-                if (actualValue != expectedValue)
-                {
-                    errors.Add($"Parameter {parameterName}'s expected value is '{expectedValue}' but its actual value is '{actualValue}'");
-                }
-            }
-            else
-            {
-                errors.Add($"Parameter {parameterName} is missing");
-            }
-        }
-
-        private class MockBackchannel : HttpMessageHandler
-        {
-            protected override async Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
-            {
-                if (request.RequestUri.AbsoluteUri.Equals("https://login.microsoftonline.com/common/.well-known/openid-configuration"))
-                {
-                    return await ReturnResource("wellknownconfig.json");
-                }
-                if (request.RequestUri.AbsoluteUri.Equals("https://login.microsoftonline.com/common/discovery/keys"))
-                {
-                    return await ReturnResource("wellknownkeys.json");
-                }
-
-                throw new NotImplementedException();
-            }
-
-            private async Task<HttpResponseMessage> ReturnResource(string resource)
-            {
-                var resourceName = "Microsoft.AspNetCore.Authentication.Test.OpenIdConnect." + resource;
-                using (var stream = typeof(MockBackchannel).Assembly.GetManifestResourceStream(resourceName))
-                using (var reader = new StreamReader(stream))
-                {
-                    var body = await reader.ReadToEndAsync();
-                    var content = new StringContent(body, Encoding.UTF8, "application/json");
-                    return new HttpResponseMessage()
-                    {
-                        Content = content,
-                    };
-                }
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestTransaction.cs b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestTransaction.cs
deleted file mode 100644
index 4f924172c..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/TestTransaction.cs
+++ /dev/null
@@ -1,40 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Linq;
-using System.Net.Http;
-using System.Xml.Linq;
-
-namespace Microsoft.AspNetCore.Authentication.Test.OpenIdConnect
-{
-    internal class TestTransaction
-    {
-        public HttpRequestMessage Request { get; set; }
-
-        public HttpResponseMessage Response { get; set; }
-
-        public IList<string> SetCookie { get; set; }
-
-        public string ResponseText { get; set; }
-
-        public XElement ResponseElement { get; set; }
-
-        public string AuthenticationCookieValue
-        {
-            get
-            {
-                if (SetCookie != null && SetCookie.Count > 0)
-                {
-                    var authCookie = SetCookie.SingleOrDefault(c => c.Contains(".AspNetCore.Cookie="));
-                    if (authCookie != null)
-                    {
-                        return authCookie.Substring(0, authCookie.IndexOf(';'));
-                    }
-                }
-
-                return null;
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/wellknownconfig.json b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/wellknownconfig.json
deleted file mode 100644
index 4d46a8cf0..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/wellknownconfig.json
+++ /dev/null
@@ -1,23 +0,0 @@
-{
-  "authorization_endpoint": "https://login.microsoftonline.com/common/oauth2/authorize",
-  "token_endpoint": "https://login.microsoftonline.com/common/oauth2/token",
-  "token_endpoint_auth_methods_supported": [ "client_secret_post", "private_key_jwt", "client_secret_basic" ],
-  "jwks_uri": "https://login.microsoftonline.com/common/discovery/keys",
-  "response_modes_supported": [ "query", "fragment", "form_post" ],
-  "subject_types_supported": [ "pairwise" ],
-  "id_token_signing_alg_values_supported": [ "RS256" ],
-  "http_logout_supported": true,
-  "frontchannel_logout_supported": true,
-  "end_session_endpoint": "https://login.microsoftonline.com/common/oauth2/logout",
-  "response_types_supported": [ "code", "id_token", "code id_token", "token id_token", "token" ],
-  "scopes_supported": [ "openid" ],
-  "issuer": "https://sts.windows.net/{tenantid}/",
-  "claims_supported": [ "sub", "iss", "cloud_instance_name", "cloud_instance_host_name", "cloud_graph_host_name", "msgraph_host", "aud", "exp", "iat", "auth_time", "acr", "amr", "nonce", "email", "given_name", "family_name", "nickname" ],
-  "microsoft_multi_refresh_token": true,
-  "check_session_iframe": "https://login.microsoftonline.com/common/oauth2/checksession",
-  "userinfo_endpoint": "https://login.microsoftonline.com/common/openid/userinfo",
-  "tenant_region_scope": null,
-  "cloud_instance_name": "microsoftonline.com",
-  "cloud_graph_host_name": "graph.windows.net",
-  "msgraph_host": "graph.microsoft.com"
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/wellknownkeys.json b/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/wellknownkeys.json
deleted file mode 100644
index 77cc5562a..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/OpenIdConnect/wellknownkeys.json
+++ /dev/null
@@ -1,31 +0,0 @@
-{
-  "keys": [
-    {
-      "kty": "RSA",
-      "use": "sig",
-      "kid": "SSQdhI1cKvhQEDSJxE2gGYs40Q0",
-      "x5t": "SSQdhI1cKvhQEDSJxE2gGYs40Q0",
-      "n": "pJUB90EMxiNjgkVz5CLLUuG5bYwirL2LXfVsq_nnY686WzbinkvFnNs6LvrJ6DWD5NV1-0Tq2eZj7WU8H9ytmDPsRnJ0b49gRCJYOg6-SdOe9Tl0lB0IBJE1aWh3OdCVrZLE4LH4-LGIDrkwnCV8dKFkO3EIUYPaEysL4g4wLx-TCfpMWE37XC09P-nBRVkRNcihrzY38_MC42NkRdDwByZemXkQKddnn5Y5o4rVzPGqQy3vjmTjKolYEIBYa7n3yF0848MG0k338bjnyceJgmZzjxttkWTVDikQXSldbu3QCrCAlipbWPUAXaZK8buY8LP80G4U_wx4LuZ_Krq5OQ",
-      "e": "AQAB",
-      "x5c": [ "MIIDBTCCAe2gAwIBAgIQHJ7yHxNEM7tBeqcRTMBhhTANBgkqhkiG9w0BAQsFADAtMSswKQYDVQQDEyJhY2NvdW50cy5hY2Nlc3Njb250cm9sLndpbmRvd3MubmV0MB4XDTE4MDEwODAwMDAwMFoXDTIwMDEwOTAwMDAwMFowLTErMCkGA1UEAxMiYWNjb3VudHMuYWNjZXNzY29udHJvbC53aW5kb3dzLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSVAfdBDMYjY4JFc+Qiy1LhuW2MIqy9i131bKv552OvOls24p5LxZzbOi76yeg1g+TVdftE6tnmY+1lPB/crZgz7EZydG+PYEQiWDoOvknTnvU5dJQdCASRNWlodznQla2SxOCx+PixiA65MJwlfHShZDtxCFGD2hMrC+IOMC8fkwn6TFhN+1wtPT/pwUVZETXIoa82N/PzAuNjZEXQ8AcmXpl5ECnXZ5+WOaOK1czxqkMt745k4yqJWBCAWGu598hdPOPDBtJN9/G458nHiYJmc48bbZFk1Q4pEF0pXW7t0AqwgJYqW1j1AF2mSvG7mPCz/NBuFP8MeC7mfyq6uTkCAwEAAaMhMB8wHQYDVR0OBBYEFFVWt/4iTcBiWk+EX1dCKZGoAlBQMA0GCSqGSIb3DQEBCwUAA4IBAQCJrLUiCfldfDFhZLG08DpLcwpn8Mvhm61ZpPANyCawRgaoBOsxFJew1qpC2wfXh3yUwJEIkkTGXAsiWENkeqmjd2XXQwZuIHIo5/KyZLfo2m1CmEH/QXL6uRx1f8liPr4efC8H+7/sduf6nPfk0UpNsAHA6RxJFy2jg2wHU+Ux4jK4Gc5d/rJPhJhvyS9Zax1hbTlf+N32ZvS780VMDb/nf2LdtACL0ya/+KSDGVXS3GhS9FLEXrBNjq921ghVIFJhPzm54yfeupIwz+zfISoTHIYw37i7iNUbkvDrm14a27pwLS/tfSuJHKcGPt1sjMu6SS/pf1BlvdoFkKdLLaUb" ]
-    },
-    {
-      "kty": "RSA",
-      "use": "sig",
-      "kid": "FSimuFrFNoC0sJXGmv13nNZceDc",
-      "x5t": "FSimuFrFNoC0sJXGmv13nNZceDc",
-      "n": "yCYaJF8uHoV2L31cjZUDdcodK1Y1EsTLkDD-DEXFyGeHaQ92T9t6MU6zazBzHvJRarG6OMI1GwsFxZ9opSVOeuRjuL3H2ehmUyuKOAnL8uT4cfkdfbg9AIN_63COccfFn0br_xUszZ7lkF5mb63sze-G66YQcbdTCWgsXpxR6491b57Gc4HVTV8cEgU4byezhJIiirrPDmt23QJIjr6XtvUMSNW88u0kX7PKOUnVCns2AG8DB2I-JExTiXwhFVu5JUqgpgmjIngvd5eyNzOgFJMnpWNXabKDP3oMLvQxjdq9xwWuTu0IQLpmUxEF9jVc8vKV1Pu2xHcS7ON5xJrUzw",
-      "e": "AQAB",
-      "x5c": [ "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" ]
-    },
-    {
-      "kty": "RSA",
-      "use": "sig",
-      "kid": "2S4SCVGs8Sg9LS6AqLIq6DpW-g8",
-      "x5t": "2S4SCVGs8Sg9LS6AqLIq6DpW-g8",
-      "n": "oZ-QQrNuB4ei9ATYrT61ebPtvwwYWnsrTpp4ISSp6niZYb92XM0oUTNgqd_C1vGN8J-y9wCbaJWkpBf46CjdZehrqczPhzhHau8WcRXocSB1u_tuZhv1ooAZ4bAcy79UkeLiG60HkuTNJJC8CfaTp1R97szBhuk0Vz5yt4r5SpfewIlBCnZUYwkDS172H9WapQu-3P2Qjh0l-JLyCkdrhvizZUk0atq5_AIDKRU-A0pRGc-EZhUL0LqUMz6c6M2s_4GnQaScv44A5iZUDD15B6e8Apb2yARohkWmOnmRcTVfes8EkfxjzZEzm3cNkvP0ogILyISHKlkzy2OmlU6iXw",
-      "e": "AQAB",
-      "x5c": [ "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" ]
-    }
-  ]
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/PolicyTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/PolicyTests.cs
deleted file mode 100644
index 368026beb..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/PolicyTests.cs
+++ /dev/null
@@ -1,487 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class PolicyTests
-    {
-        [Fact]
-        public async Task CanDispatch()
-        {
-            var server = CreateServer(services =>
-            {
-                services.AddLogging().AddAuthentication(o =>
-                {
-                    o.AddScheme<TestHandler>("auth1", "auth1");
-                    o.AddScheme<TestHandler>("auth2", "auth2");
-                    o.AddScheme<TestHandler>("auth3", "auth3");
-                })
-                .AddPolicyScheme("policy1", "policy1", p =>
-                {
-                    p.ForwardDefault = "auth1";
-                })
-                .AddPolicyScheme("policy2", "policy2", p =>
-                {
-                    p.ForwardAuthenticate = "auth2";
-                });
-            });
-
-            var transaction = await server.SendAsync("http://example.com/auth/policy1");
-            Assert.Equal("auth1", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "auth1"));
-
-            transaction = await server.SendAsync("http://example.com/auth/auth1");
-            Assert.Equal("auth1", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "auth1"));
-
-            transaction = await server.SendAsync("http://example.com/auth/auth2");
-            Assert.Equal("auth2", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "auth2"));
-
-            transaction = await server.SendAsync("http://example.com/auth/auth3");
-            Assert.Equal("auth3", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "auth3"));
-
-            transaction = await server.SendAsync("http://example.com/auth/policy2");
-            Assert.Equal("auth2", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "auth2"));
-        }
-
-        [Fact]
-        public async Task DefaultTargetSelectorWinsOverDefaultTarget()
-        {
-            var services = new ServiceCollection().AddOptions().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.AddScheme<TestHandler>("auth1", "auth1");
-                o.AddScheme<TestHandler2>("auth2", "auth2");
-            })
-            .AddPolicyScheme("forward", "forward", p => {
-                p.ForwardDefault= "auth2";
-                p.ForwardDefaultSelector = ctx => "auth1";
-            });
-
-            var handler1 = new TestHandler();
-            services.AddSingleton(handler1);
-            var handler2 = new TestHandler2();
-            services.AddSingleton(handler2);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            Assert.Equal(0, handler1.AuthenticateCount);
-            Assert.Equal(0, handler1.ForbidCount);
-            Assert.Equal(0, handler1.ChallengeCount);
-            Assert.Equal(0, handler1.SignInCount);
-            Assert.Equal(0, handler1.SignOutCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-            Assert.Equal(0, handler2.ForbidCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-            Assert.Equal(0, handler2.SignInCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.AuthenticateAsync("forward");
-            Assert.Equal(1, handler1.AuthenticateCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-
-            await context.ForbidAsync("forward");
-            Assert.Equal(1, handler1.ForbidCount);
-            Assert.Equal(0, handler2.ForbidCount);
-
-            await context.ChallengeAsync("forward");
-            Assert.Equal(1, handler1.ChallengeCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-
-            await context.SignOutAsync("forward");
-            Assert.Equal(1, handler1.SignOutCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.SignInAsync("forward", new ClaimsPrincipal());
-            Assert.Equal(1, handler1.SignInCount);
-            Assert.Equal(0, handler2.SignInCount);
-        }
-
-        [Fact]
-        public async Task NullDefaultTargetSelectorFallsBacktoDefaultTarget()
-        {
-            var services = new ServiceCollection().AddOptions().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.AddScheme<TestHandler>("auth1", "auth1");
-                o.AddScheme<TestHandler2>("auth2", "auth2");
-            })
-            .AddPolicyScheme("forward", "forward", p => {
-                p.ForwardDefault= "auth1";
-                p.ForwardDefaultSelector = ctx => null;
-            });
-
-            var handler1 = new TestHandler();
-            services.AddSingleton(handler1);
-            var handler2 = new TestHandler2();
-            services.AddSingleton(handler2);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            Assert.Equal(0, handler1.AuthenticateCount);
-            Assert.Equal(0, handler1.ForbidCount);
-            Assert.Equal(0, handler1.ChallengeCount);
-            Assert.Equal(0, handler1.SignInCount);
-            Assert.Equal(0, handler1.SignOutCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-            Assert.Equal(0, handler2.ForbidCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-            Assert.Equal(0, handler2.SignInCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.AuthenticateAsync("forward");
-            Assert.Equal(1, handler1.AuthenticateCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-
-            await context.ForbidAsync("forward");
-            Assert.Equal(1, handler1.ForbidCount);
-            Assert.Equal(0, handler2.ForbidCount);
-
-            await context.ChallengeAsync("forward");
-            Assert.Equal(1, handler1.ChallengeCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-
-            await context.SignOutAsync("forward");
-            Assert.Equal(1, handler1.SignOutCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.SignInAsync("forward", new ClaimsPrincipal());
-            Assert.Equal(1, handler1.SignInCount);
-            Assert.Equal(0, handler2.SignInCount);
-        }
-
-        [Fact]
-        public async Task SpecificTargetAlwaysWinsOverDefaultTarget()
-        {
-            var services = new ServiceCollection().AddOptions().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.AddScheme<TestHandler>("auth1", "auth1");
-                o.AddScheme<TestHandler2>("auth2", "auth2");
-            })
-            .AddPolicyScheme("forward", "forward", p => {
-                p.ForwardDefault= "auth2";
-                p.ForwardDefaultSelector = ctx => "auth2";
-                p.ForwardAuthenticate = "auth1";
-                p.ForwardSignIn = "auth1";
-                p.ForwardSignOut = "auth1";
-                p.ForwardForbid = "auth1";
-                p.ForwardChallenge = "auth1";
-            });
-
-            var handler1 = new TestHandler();
-            services.AddSingleton(handler1);
-            var handler2 = new TestHandler2();
-            services.AddSingleton(handler2);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            Assert.Equal(0, handler1.AuthenticateCount);
-            Assert.Equal(0, handler1.ForbidCount);
-            Assert.Equal(0, handler1.ChallengeCount);
-            Assert.Equal(0, handler1.SignInCount);
-            Assert.Equal(0, handler1.SignOutCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-            Assert.Equal(0, handler2.ForbidCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-            Assert.Equal(0, handler2.SignInCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.AuthenticateAsync("forward");
-            Assert.Equal(1, handler1.AuthenticateCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-
-            await context.ForbidAsync("forward");
-            Assert.Equal(1, handler1.ForbidCount);
-            Assert.Equal(0, handler2.ForbidCount);
-
-            await context.ChallengeAsync("forward");
-            Assert.Equal(1, handler1.ChallengeCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-
-            await context.SignOutAsync("forward");
-            Assert.Equal(1, handler1.SignOutCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.SignInAsync("forward", new ClaimsPrincipal());
-            Assert.Equal(1, handler1.SignInCount);
-            Assert.Equal(0, handler2.SignInCount);
-        }
-
-        [Fact]
-        public async Task VirtualSchemeTargetsForwardWithDefaultTarget()
-        {
-            var services = new ServiceCollection().AddOptions().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.AddScheme<TestHandler>("auth1", "auth1");
-                o.AddScheme<TestHandler2>("auth2", "auth2");
-            })
-            .AddPolicyScheme("forward", "forward", p => p.ForwardDefault= "auth1");
-
-            var handler1 = new TestHandler();
-            services.AddSingleton(handler1);
-            var handler2 = new TestHandler2();
-            services.AddSingleton(handler2);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            Assert.Equal(0, handler1.AuthenticateCount);
-            Assert.Equal(0, handler1.ForbidCount);
-            Assert.Equal(0, handler1.ChallengeCount);
-            Assert.Equal(0, handler1.SignInCount);
-            Assert.Equal(0, handler1.SignOutCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-            Assert.Equal(0, handler2.ForbidCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-            Assert.Equal(0, handler2.SignInCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.AuthenticateAsync("forward");
-            Assert.Equal(1, handler1.AuthenticateCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-
-            await context.ForbidAsync("forward");
-            Assert.Equal(1, handler1.ForbidCount);
-            Assert.Equal(0, handler2.ForbidCount);
-
-            await context.ChallengeAsync("forward");
-            Assert.Equal(1, handler1.ChallengeCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-
-            await context.SignOutAsync("forward");
-            Assert.Equal(1, handler1.SignOutCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.SignInAsync("forward", new ClaimsPrincipal());
-            Assert.Equal(1, handler1.SignInCount);
-            Assert.Equal(0, handler2.SignInCount);
-        }
-
-        [Fact]
-        public async Task VirtualSchemeTargetsOverrideDefaultTarget()
-        {
-            var services = new ServiceCollection().AddOptions().AddLogging();
-            services.AddAuthentication(o =>
-            {
-                o.AddScheme<TestHandler>("auth1", "auth1");
-                o.AddScheme<TestHandler2>("auth2", "auth2");
-            })
-            .AddPolicyScheme("forward", "forward", p =>
-            {
-                p.ForwardDefault= "auth1";
-                p.ForwardChallenge = "auth2";
-                p.ForwardSignIn = "auth2";
-            });
-
-            var handler1 = new TestHandler();
-            services.AddSingleton(handler1);
-            var handler2 = new TestHandler2();
-            services.AddSingleton(handler2);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            Assert.Equal(0, handler1.AuthenticateCount);
-            Assert.Equal(0, handler1.ForbidCount);
-            Assert.Equal(0, handler1.ChallengeCount);
-            Assert.Equal(0, handler1.SignInCount);
-            Assert.Equal(0, handler1.SignOutCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-            Assert.Equal(0, handler2.ForbidCount);
-            Assert.Equal(0, handler2.ChallengeCount);
-            Assert.Equal(0, handler2.SignInCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.AuthenticateAsync("forward");
-            Assert.Equal(1, handler1.AuthenticateCount);
-            Assert.Equal(0, handler2.AuthenticateCount);
-
-            await context.ForbidAsync("forward");
-            Assert.Equal(1, handler1.ForbidCount);
-            Assert.Equal(0, handler2.ForbidCount);
-
-            await context.ChallengeAsync("forward");
-            Assert.Equal(0, handler1.ChallengeCount);
-            Assert.Equal(1, handler2.ChallengeCount);
-
-            await context.SignOutAsync("forward");
-            Assert.Equal(1, handler1.SignOutCount);
-            Assert.Equal(0, handler2.SignOutCount);
-
-            await context.SignInAsync("forward", new ClaimsPrincipal());
-            Assert.Equal(0, handler1.SignInCount);
-            Assert.Equal(1, handler2.SignInCount);
-        }
-
-        [Fact]
-        public async Task CanDynamicTargetBasedOnQueryString()
-        {
-            var server = CreateServer(services =>
-            {
-                services.AddAuthentication(o =>
-                {
-                    o.AddScheme<TestHandler>("auth1", "auth1");
-                    o.AddScheme<TestHandler>("auth2", "auth2");
-                    o.AddScheme<TestHandler>("auth3", "auth3");
-                })
-                .AddPolicyScheme("dynamic", "dynamic", p =>
-                {
-                    p.ForwardDefaultSelector = c => c.Request.QueryString.Value.Substring(1);
-                });
-            });
- 
-            var transaction = await server.SendAsync("http://example.com/auth/dynamic?auth1");
-            Assert.Equal("auth1", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "auth1"));
-            transaction = await server.SendAsync("http://example.com/auth/dynamic?auth2");
-            Assert.Equal("auth2", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "auth2"));
-            transaction = await server.SendAsync("http://example.com/auth/dynamic?auth3");
-            Assert.Equal("auth3", transaction.FindClaimValue(ClaimTypes.NameIdentifier, "auth3"));
-        }
-
-        private class TestHandler : IAuthenticationSignInHandler
-        {
-            public AuthenticationScheme Scheme { get; set; }
-            public int SignInCount { get; set; }
-            public int SignOutCount { get; set; }
-            public int ForbidCount { get; set; }
-            public int ChallengeCount { get; set; }
-            public int AuthenticateCount { get; set; }
-
-            public Task<AuthenticateResult> AuthenticateAsync()
-            {
-                AuthenticateCount++;
-                var principal = new ClaimsPrincipal();
-                var id = new ClaimsIdentity();
-                id.AddClaim(new Claim(ClaimTypes.NameIdentifier, Scheme.Name, ClaimValueTypes.String, Scheme.Name));
-                principal.AddIdentity(id);
-                return Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(principal, new AuthenticationProperties(), Scheme.Name)));
-            }
-
-            public Task ChallengeAsync(AuthenticationProperties properties)
-            {
-                ChallengeCount++;
-                return Task.CompletedTask;
-            }
-
-            public Task ForbidAsync(AuthenticationProperties properties)
-            {
-                ForbidCount++;
-                return Task.CompletedTask;
-            }
-
-            public Task InitializeAsync(AuthenticationScheme scheme, HttpContext context)
-            {
-                Scheme = scheme;
-                return Task.CompletedTask;
-            }
-
-            public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-            {
-                SignInCount++;
-                return Task.CompletedTask;
-            }
-
-            public Task SignOutAsync(AuthenticationProperties properties)
-            {
-                SignOutCount++;
-                return Task.CompletedTask;
-            }
-        }
-
-        private class TestHandler2 : IAuthenticationSignInHandler
-        {
-            public AuthenticationScheme Scheme { get; set; }
-            public int SignInCount { get; set; }
-            public int SignOutCount { get; set; }
-            public int ForbidCount { get; set; }
-            public int ChallengeCount { get; set; }
-            public int AuthenticateCount { get; set; }
-
-            public Task<AuthenticateResult> AuthenticateAsync()
-            {
-                AuthenticateCount++;
-                var principal = new ClaimsPrincipal();
-                var id = new ClaimsIdentity();
-                id.AddClaim(new Claim(ClaimTypes.NameIdentifier, Scheme.Name, ClaimValueTypes.String, Scheme.Name));
-                principal.AddIdentity(id);
-                return Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(principal, new AuthenticationProperties(), Scheme.Name)));
-            }
-
-            public Task ChallengeAsync(AuthenticationProperties properties)
-            {
-                ChallengeCount++;
-                return Task.CompletedTask;
-            }
-
-            public Task ForbidAsync(AuthenticationProperties properties)
-            {
-                ForbidCount++;
-                return Task.CompletedTask;
-            }
-
-            public Task InitializeAsync(AuthenticationScheme scheme, HttpContext context)
-            {
-                Scheme = scheme;
-                return Task.CompletedTask;
-            }
-
-            public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-            {
-                SignInCount++;
-                return Task.CompletedTask;
-            }
-
-            public Task SignOutAsync(AuthenticationProperties properties)
-            {
-                SignOutCount++;
-                return Task.CompletedTask;
-            }
-        }
-
-        private static TestServer CreateServer(Action<IServiceCollection> configure = null, string defaultScheme = null)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        var req = context.Request;
-                        var res = context.Response;
-                        if (req.Path.StartsWithSegments(new PathString("/auth"), out var remainder))
-                        {
-                            var name = (remainder.Value.Length > 0) ? remainder.Value.Substring(1) : null;
-                            var result = await context.AuthenticateAsync(name);
-                            res.Describe(result?.Ticket?.Principal);
-                        }
-                        else
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(services =>
-                {
-                    configure?.Invoke(services);
-                });
-            return new TestServer(builder);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/RemoteAuthenticationTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/RemoteAuthenticationTests.cs
deleted file mode 100644
index d477e7534..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/RemoteAuthenticationTests.cs
+++ /dev/null
@@ -1,92 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using System;
-using System.Threading.Tasks;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public abstract class RemoteAuthenticationTests<TOptions> : SharedAuthenticationTests<TOptions> where TOptions : RemoteAuthenticationOptions
-    {
-        protected override string DisplayName => DefaultScheme;
-
-        private TestServer CreateServer(Action<TOptions> configureOptions, Func<HttpContext, Task> testpath = null, bool isDefault = true)
-            => CreateServerWithServices(s =>
-            {
-                var builder = s.AddAuthentication();
-                if (isDefault)
-                {
-                    s.Configure<AuthenticationOptions>(o => o.DefaultScheme = DefaultScheme);
-                }
-                RegisterAuth(builder, configureOptions);
-                s.AddSingleton<ISystemClock>(Clock);
-            }, testpath);
-
-
-        protected virtual TestServer CreateServerWithServices(Action<IServiceCollection> configureServices, Func<HttpContext, Task> testpath = null)
-        {
-            //private static TestServer CreateServer(Action<IApplicationBuilder> configure, Action<IServiceCollection> configureServices, Func<HttpContext, Task<bool>> handler)
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.Use(async (context, next) =>
-                    {
-                        if (testpath != null)
-                        {
-                            await testpath(context);
-                        }
-                        await next();
-                    });
-                })
-                .ConfigureServices(configureServices);
-            return new TestServer(builder);
-        }
-
-        protected abstract void ConfigureDefaults(TOptions o);
-
-        [Fact]
-        public async Task VerifySignInSchemeCannotBeSetToSelf()
-        {
-            var server = CreateServer(
-                o => 
-                {
-                    ConfigureDefaults(o);
-                    o.SignInScheme = DefaultScheme;
-                },
-                context => context.ChallengeAsync(DefaultScheme));
-            var error = await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync("https://example.com/challenge"));
-            Assert.Contains("cannot be set to itself", error.Message);
-        }
-
-        [Fact]
-        public async Task VerifySignInSchemeCannotBeSetToSelfUsingDefaultScheme()
-        {
-            var server = CreateServer(
-                o => o.SignInScheme = null,
-                context => context.ChallengeAsync(DefaultScheme),
-                isDefault: true);
-            var error = await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync("https://example.com/challenge"));
-            Assert.Contains("cannot be set to itself", error.Message);
-        }
-
-        [Fact]
-        public async Task VerifySignInSchemeCannotBeSetToSelfUsingDefaultSignInScheme()
-        {
-            var server = CreateServerWithServices(
-                services =>
-                {
-                    var builder = services.AddAuthentication(o => o.DefaultSignInScheme = DefaultScheme);
-                    RegisterAuth(builder, o => o.SignInScheme = null);
-                },
-                context => context.ChallengeAsync(DefaultScheme));
-            var error = await Assert.ThrowsAsync<InvalidOperationException>(() => server.SendAsync("https://example.com/challenge"));
-            Assert.Contains("cannot be set to itself", error.Message);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/SecureDataFormatTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/SecureDataFormatTests.cs
deleted file mode 100644
index bda4b09fa..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/SecureDataFormatTests.cs
+++ /dev/null
@@ -1,80 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Text;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.Extensions.DependencyInjection;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.DataHandler
-{
-    public class SecureDataFormatTests
-    {
-        public SecureDataFormatTests()
-        {
-            var serviceCollection = new ServiceCollection();
-            serviceCollection.AddDataProtection();
-            ServiceProvider = serviceCollection.BuildServiceProvider();
-        }
-
-        public IServiceProvider ServiceProvider { get; }
-
-        [Fact]
-        public void ProtectDataRoundTrips()
-        {
-            var provider = ServiceProvider.GetRequiredService<IDataProtectionProvider>();
-            var prototector = provider.CreateProtector("test");
-            var secureDataFormat = new SecureDataFormat<string>(new StringSerializer(), prototector);
-
-            string input = "abcdefghijklmnopqrstuvwxyz0123456789";
-            var protectedData = secureDataFormat.Protect(input);
-            var result = secureDataFormat.Unprotect(protectedData);
-            Assert.Equal(input, result);
-        }
-
-        [Fact]
-        public void ProtectWithPurposeRoundTrips()
-        {
-            var provider = ServiceProvider.GetRequiredService<IDataProtectionProvider>();
-            var prototector = provider.CreateProtector("test");
-            var secureDataFormat = new SecureDataFormat<string>(new StringSerializer(), prototector);
-
-            string input = "abcdefghijklmnopqrstuvwxyz0123456789";
-            string purpose = "purpose1";
-            var protectedData = secureDataFormat.Protect(input, purpose);
-            var result = secureDataFormat.Unprotect(protectedData, purpose);
-            Assert.Equal(input, result);
-        }
-
-        [Fact]
-        public void UnprotectWithDifferentPurposeFails()
-        {
-            var provider = ServiceProvider.GetRequiredService<IDataProtectionProvider>();
-            var prototector = provider.CreateProtector("test");
-            var secureDataFormat = new SecureDataFormat<string>(new StringSerializer(), prototector);
-
-            string input = "abcdefghijklmnopqrstuvwxyz0123456789";
-            string purpose = "purpose1";
-            var protectedData = secureDataFormat.Protect(input, purpose);
-            var result = secureDataFormat.Unprotect(protectedData); // Null other purpose
-            Assert.Null(result);
-
-            result = secureDataFormat.Unprotect(protectedData, "purpose2");
-            Assert.Null(result);
-        }
-
-        private class StringSerializer : IDataSerializer<string>
-        {
-            public byte[] Serialize(string model)
-            {
-                return Encoding.UTF8.GetBytes(model);
-            }
-
-            public string Deserialize(byte[] data)
-            {
-                return Encoding.UTF8.GetString(data);
-            }
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/SharedAuthenticationTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/SharedAuthenticationTests.cs
deleted file mode 100644
index 4590c4915..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/SharedAuthenticationTests.cs
+++ /dev/null
@@ -1,510 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Authentication.Tests;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.DependencyInjection;
-using System;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public abstract class SharedAuthenticationTests<TOptions> where TOptions : AuthenticationSchemeOptions
-    {
-        protected TestClock Clock { get; } = new TestClock();
-
-        protected abstract string DefaultScheme { get; }
-        protected virtual string DisplayName { get; }
-        protected abstract Type HandlerType { get; }
-
-        protected virtual bool SupportsSignIn { get => true; }
-        protected virtual bool SupportsSignOut { get => true; }
-
-        protected abstract void RegisterAuth(AuthenticationBuilder services, Action<TOptions> configure);
-
-        [Fact]
-        public async Task CanForwardDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-
-            var builder = services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = DefaultScheme;
-                o.AddScheme<TestHandler>("auth1", "auth1");
-            });
-            RegisterAuth(builder, o => o.ForwardDefault = "auth1");
-
-            var forwardDefault = new TestHandler();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-
-            await context.AuthenticateAsync();
-            Assert.Equal(1, forwardDefault.AuthenticateCount);
-
-            await context.ForbidAsync();
-            Assert.Equal(1, forwardDefault.ForbidCount);
-
-            await context.ChallengeAsync();
-            Assert.Equal(1, forwardDefault.ChallengeCount);
-
-            if (SupportsSignOut)
-            {
-                await context.SignOutAsync();
-                Assert.Equal(1, forwardDefault.SignOutCount);
-            }
-            else
-            {
-                await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignOutAsync());
-            }
-
-            if (SupportsSignIn)
-            {
-                await context.SignInAsync(new ClaimsPrincipal());
-                Assert.Equal(1, forwardDefault.SignInCount);
-            }
-            else
-            {
-                await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-            }
-        }
-
-        [Fact]
-        public async Task ForwardSignInWinsOverDefault()
-        {
-            if (SupportsSignIn)
-            {
-                var services = new ServiceCollection().AddLogging();
-
-                var builder = services.AddAuthentication(o =>
-                {
-                    o.DefaultScheme = DefaultScheme;
-                    o.AddScheme<TestHandler2>("auth1", "auth1");
-                    o.AddScheme<TestHandler>("specific", "specific");
-                });
-                RegisterAuth(builder, o =>
-                {
-                    o.ForwardDefault = "auth1";
-                    o.ForwardSignIn = "specific";
-                });
-
-                var specific = new TestHandler();
-                services.AddSingleton(specific);
-                var forwardDefault = new TestHandler2();
-                services.AddSingleton(forwardDefault);
-
-                var sp = services.BuildServiceProvider();
-                var context = new DefaultHttpContext();
-                context.RequestServices = sp;
-
-                await context.SignInAsync(new ClaimsPrincipal());
-                Assert.Equal(1, specific.SignInCount);
-                Assert.Equal(0, specific.AuthenticateCount);
-                Assert.Equal(0, specific.ForbidCount);
-                Assert.Equal(0, specific.ChallengeCount);
-                Assert.Equal(0, specific.SignOutCount);
-
-                Assert.Equal(0, forwardDefault.AuthenticateCount);
-                Assert.Equal(0, forwardDefault.ForbidCount);
-                Assert.Equal(0, forwardDefault.ChallengeCount);
-                Assert.Equal(0, forwardDefault.SignInCount);
-                Assert.Equal(0, forwardDefault.SignOutCount);
-            }
-        }
-
-        [Fact]
-        public async Task ForwardSignOutWinsOverDefault()
-        {
-            if (SupportsSignOut)
-            {
-                var services = new ServiceCollection().AddLogging();
-                var builder = services.AddAuthentication(o =>
-                {
-                    o.DefaultScheme = DefaultScheme;
-                    o.AddScheme<TestHandler2>("auth1", "auth1");
-                    o.AddScheme<TestHandler>("specific", "specific");
-                });
-                RegisterAuth(builder, o =>
-                {
-                    o.ForwardDefault = "auth1";
-                    o.ForwardSignOut = "specific";
-                });
-
-                var specific = new TestHandler();
-                services.AddSingleton(specific);
-                var forwardDefault = new TestHandler2();
-                services.AddSingleton(forwardDefault);
-
-                var sp = services.BuildServiceProvider();
-                var context = new DefaultHttpContext();
-                context.RequestServices = sp;
-
-                await context.SignOutAsync();
-                Assert.Equal(1, specific.SignOutCount);
-                Assert.Equal(0, specific.AuthenticateCount);
-                Assert.Equal(0, specific.ForbidCount);
-                Assert.Equal(0, specific.ChallengeCount);
-                Assert.Equal(0, specific.SignInCount);
-
-                Assert.Equal(0, forwardDefault.AuthenticateCount);
-                Assert.Equal(0, forwardDefault.ForbidCount);
-                Assert.Equal(0, forwardDefault.ChallengeCount);
-                Assert.Equal(0, forwardDefault.SignInCount);
-                Assert.Equal(0, forwardDefault.SignOutCount);
-            }
-        }
-
-        [Fact]
-        public async Task ForwardForbidWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            var builder = services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = DefaultScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler>("specific", "specific");
-            });
-            RegisterAuth(builder, o =>
-            {
-                o.ForwardDefault = "auth1";
-                o.ForwardForbid = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.ForbidAsync();
-            Assert.Equal(0, specific.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(1, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-        }
-
-        [Fact]
-        public async Task ForwardAuthenticateWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            var builder = services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = DefaultScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler>("specific", "specific");
-            });
-            RegisterAuth(builder, o =>
-            {
-                o.ForwardDefault = "auth1";
-                o.ForwardAuthenticate = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.AuthenticateAsync();
-            Assert.Equal(0, specific.SignOutCount);
-            Assert.Equal(1, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-        }
-
-        [Fact]
-        public async Task ForwardChallengeWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            var builder = services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = DefaultScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler>("specific", "specific");
-            });
-            RegisterAuth(builder, o =>
-            {
-                o.ForwardDefault = "auth1";
-                o.ForwardChallenge = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.ChallengeAsync();
-            Assert.Equal(0, specific.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(1, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-        }
-
-        [Fact]
-        public async Task ForwardSelectorWinsOverDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            var builder = services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = DefaultScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler3>("selector", "selector");
-                o.AddScheme<TestHandler>("specific", "specific");
-            });
-            RegisterAuth(builder, o =>
-            {
-                o.ForwardDefault = "auth1";
-                o.ForwardDefaultSelector = _ => "selector";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-            var selector = new TestHandler3();
-            services.AddSingleton(selector);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.AuthenticateAsync();
-            Assert.Equal(1, selector.AuthenticateCount);
-
-            await context.ForbidAsync();
-            Assert.Equal(1, selector.ForbidCount);
-
-            await context.ChallengeAsync();
-            Assert.Equal(1, selector.ChallengeCount);
-
-            if (SupportsSignOut)
-            {
-                await context.SignOutAsync();
-                Assert.Equal(1, selector.SignOutCount);
-            }
-            else
-            {
-                await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignOutAsync());
-            }
-
-            if (SupportsSignIn)
-            {
-                await context.SignInAsync(new ClaimsPrincipal());
-                Assert.Equal(1, selector.SignInCount);
-            }
-            else
-            {
-                await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-            }
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-            Assert.Equal(0, specific.SignOutCount);
-        }
-
-        [Fact]
-        public async Task NullForwardSelectorUsesDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            var builder = services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = DefaultScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler3>("selector", "selector");
-                o.AddScheme<TestHandler>("specific", "specific");
-            });
-            RegisterAuth(builder, o =>
-            {
-                o.ForwardDefault = "auth1";
-                o.ForwardDefaultSelector = _ => null;
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-            var selector = new TestHandler3();
-            services.AddSingleton(selector);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.AuthenticateAsync();
-            Assert.Equal(1, forwardDefault.AuthenticateCount);
-
-            await context.ForbidAsync();
-            Assert.Equal(1, forwardDefault.ForbidCount);
-
-            await context.ChallengeAsync();
-            Assert.Equal(1, forwardDefault.ChallengeCount);
-
-            if (SupportsSignOut)
-            {
-                await context.SignOutAsync();
-                Assert.Equal(1, forwardDefault.SignOutCount);
-            }
-            else
-            {
-                await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignOutAsync());
-            }
-
-            if (SupportsSignIn)
-            {
-                await context.SignInAsync(new ClaimsPrincipal());
-                Assert.Equal(1, forwardDefault.SignInCount);
-            }
-            else
-            {
-                await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-            }
-
-            Assert.Equal(0, selector.AuthenticateCount);
-            Assert.Equal(0, selector.ForbidCount);
-            Assert.Equal(0, selector.ChallengeCount);
-            Assert.Equal(0, selector.SignInCount);
-            Assert.Equal(0, selector.SignOutCount);
-            Assert.Equal(0, specific.AuthenticateCount);
-            Assert.Equal(0, specific.ForbidCount);
-            Assert.Equal(0, specific.ChallengeCount);
-            Assert.Equal(0, specific.SignInCount);
-            Assert.Equal(0, specific.SignOutCount);
-        }
-
-        [Fact]
-        public async Task SpecificForwardWinsOverSelectorAndDefault()
-        {
-            var services = new ServiceCollection().AddLogging();
-            var builder = services.AddAuthentication(o =>
-            {
-                o.DefaultScheme = DefaultScheme;
-                o.AddScheme<TestHandler2>("auth1", "auth1");
-                o.AddScheme<TestHandler3>("selector", "selector");
-                o.AddScheme<TestHandler>("specific", "specific");
-            });
-            RegisterAuth(builder, o =>
-            {
-                o.ForwardDefault = "auth1";
-                o.ForwardDefaultSelector = _ => "selector";
-                o.ForwardAuthenticate = "specific";
-                o.ForwardChallenge = "specific";
-                o.ForwardSignIn = "specific";
-                o.ForwardSignOut = "specific";
-                o.ForwardForbid = "specific";
-            });
-
-            var specific = new TestHandler();
-            services.AddSingleton(specific);
-            var forwardDefault = new TestHandler2();
-            services.AddSingleton(forwardDefault);
-            var selector = new TestHandler3();
-            services.AddSingleton(selector);
-
-            var sp = services.BuildServiceProvider();
-            var context = new DefaultHttpContext();
-            context.RequestServices = sp;
-
-            await context.AuthenticateAsync();
-            Assert.Equal(1, specific.AuthenticateCount);
-
-            await context.ForbidAsync();
-            Assert.Equal(1, specific.ForbidCount);
-
-            await context.ChallengeAsync();
-            Assert.Equal(1, specific.ChallengeCount);
-
-            if (SupportsSignOut)
-            {
-                await context.SignOutAsync();
-                Assert.Equal(1, specific.SignOutCount);
-            }
-            else
-            {
-                await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignOutAsync());
-            }
-
-            if (SupportsSignIn)
-            {
-                await context.SignInAsync(new ClaimsPrincipal());
-                Assert.Equal(1, specific.SignInCount);
-            }
-            else
-            {
-                await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync(new ClaimsPrincipal()));
-            }
-
-            Assert.Equal(0, forwardDefault.AuthenticateCount);
-            Assert.Equal(0, forwardDefault.ForbidCount);
-            Assert.Equal(0, forwardDefault.ChallengeCount);
-            Assert.Equal(0, forwardDefault.SignInCount);
-            Assert.Equal(0, forwardDefault.SignOutCount);
-            Assert.Equal(0, selector.AuthenticateCount);
-            Assert.Equal(0, selector.ForbidCount);
-            Assert.Equal(0, selector.ChallengeCount);
-            Assert.Equal(0, selector.SignInCount);
-            Assert.Equal(0, selector.SignOutCount);
-        }
-
-        [Fact]
-        public async Task VerifySchemeDefaults()
-        {
-            var services = new ServiceCollection();
-            var builder = services.AddAuthentication();
-            RegisterAuth(builder, o => { });
-            var sp = services.BuildServiceProvider();
-            var schemeProvider = sp.GetRequiredService<IAuthenticationSchemeProvider>();
-            var scheme = await schemeProvider.GetSchemeAsync(DefaultScheme);
-            Assert.NotNull(scheme);
-            Assert.Equal(HandlerType, scheme.HandlerType);
-            Assert.Equal(DisplayName, scheme.DisplayName);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/TestClock.cs b/test/Microsoft.AspNetCore.Authentication.Test/TestClock.cs
deleted file mode 100644
index c34e4fd2d..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/TestClock.cs
+++ /dev/null
@@ -1,23 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Authentication;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class TestClock : ISystemClock
-    {
-        public TestClock()
-        {
-            UtcNow = new DateTimeOffset(2013, 6, 11, 12, 34, 56, 789, TimeSpan.Zero);
-        }
-
-        public DateTimeOffset UtcNow { get; set; }
-
-        public void Add(TimeSpan timeSpan)
-        {
-            UtcNow = UtcNow + timeSpan;
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/TestExtensions.cs b/test/Microsoft.AspNetCore.Authentication.Test/TestExtensions.cs
deleted file mode 100644
index 87d6d95a2..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/TestExtensions.cs
+++ /dev/null
@@ -1,86 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.IO;
-using System.Linq;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Text;
-using System.Threading.Tasks;
-using System.Xml;
-using System.Xml.Linq;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public static class TestExtensions
-    {
-        public const string CookieAuthenticationScheme = "External";
-
-        public static async Task<Transaction> SendAsync(this TestServer server, string uri, string cookieHeader = null)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, uri);
-            if (!string.IsNullOrEmpty(cookieHeader))
-            {
-                request.Headers.Add("Cookie", cookieHeader);
-            }
-            var transaction = new Transaction
-            {
-                Request = request,
-                Response = await server.CreateClient().SendAsync(request),
-            };
-            if (transaction.Response.Headers.Contains("Set-Cookie"))
-            {
-                transaction.SetCookie = transaction.Response.Headers.GetValues("Set-Cookie").ToList();
-            }
-            transaction.ResponseText = await transaction.Response.Content.ReadAsStringAsync();
-
-            if (transaction.Response.Content != null &&
-                transaction.Response.Content.Headers.ContentType != null &&
-                transaction.Response.Content.Headers.ContentType.MediaType == "text/xml")
-            {
-                transaction.ResponseElement = XElement.Parse(transaction.ResponseText);
-            }
-            return transaction;
-        }
-
-        public static void Describe(this HttpResponse res, ClaimsPrincipal principal)
-        {
-            res.StatusCode = 200;
-            res.ContentType = "text/xml";
-            var xml = new XElement("xml");
-            if (principal != null)
-            {
-                foreach (var identity in principal.Identities)
-                {
-                    xml.Add(identity.Claims.Select(claim => 
-                        new XElement("claim", new XAttribute("type", claim.Type), 
-                        new XAttribute("value", claim.Value), 
-                        new XAttribute("issuer", claim.Issuer))));
-                }
-            }
-            var xmlBytes = Encoding.UTF8.GetBytes(xml.ToString());
-            res.Body.Write(xmlBytes, 0, xmlBytes.Length);
-        }
-
-        public static void Describe(this HttpResponse res, IEnumerable<AuthenticationToken> tokens)
-        {
-            res.StatusCode = 200;
-            res.ContentType = "text/xml";
-            var xml = new XElement("xml");
-            if (tokens != null)
-            {
-                foreach (var token in tokens)
-                {
-                    xml.Add(new XElement("token", new XAttribute("name", token.Name),
-                        new XAttribute("value", token.Value)));
-                }
-            }
-            var xmlBytes = Encoding.UTF8.GetBytes(xml.ToString());
-            res.Body.Write(xmlBytes, 0, xmlBytes.Length);
-        }
-
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/TestHandlers.cs b/test/Microsoft.AspNetCore.Authentication.Test/TestHandlers.cs
deleted file mode 100644
index cd9fe9fb1..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/TestHandlers.cs
+++ /dev/null
@@ -1,115 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using System.Text.Encodings.Web;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Microsoft.AspNetCore.Authentication.Tests
-{
-    public class TestAuthHandler : AuthenticationHandler<AuthenticationSchemeOptions>, IAuthenticationSignInHandler
-    {
-        public TestAuthHandler(IOptionsMonitor<AuthenticationSchemeOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) : base(options, logger, encoder, clock)
-        { }
-
-        public int SignInCount { get; set; }
-        public int SignOutCount { get; set; }
-        public int ForbidCount { get; set; }
-        public int ChallengeCount { get; set; }
-        public int AuthenticateCount { get; set; }
-
-        protected override Task HandleChallengeAsync(AuthenticationProperties properties)
-        {
-            ChallengeCount++;
-            return Task.CompletedTask;
-        }
-
-        protected override Task HandleForbiddenAsync(AuthenticationProperties properties)
-        {
-            ForbidCount++;
-            return Task.CompletedTask;
-        }
-
-        protected override Task<AuthenticateResult> HandleAuthenticateAsync()
-        {
-            AuthenticateCount++;
-            var principal = new ClaimsPrincipal();
-            var id = new ClaimsIdentity();
-            id.AddClaim(new Claim(ClaimTypes.NameIdentifier, Scheme.Name, ClaimValueTypes.String, Scheme.Name));
-            principal.AddIdentity(id);
-            return Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(principal, new AuthenticationProperties(), Scheme.Name)));
-        }
-
-        public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-        {
-            SignInCount++;
-            return Task.CompletedTask;
-        }
-
-        public Task SignOutAsync(AuthenticationProperties properties)
-        {
-            SignOutCount++;
-            return Task.CompletedTask;
-        }
-    }
-
-    public class TestHandler : IAuthenticationSignInHandler
-    {
-        public AuthenticationScheme Scheme { get; set; }
-        public int SignInCount { get; set; }
-        public int SignOutCount { get; set; }
-        public int ForbidCount { get; set; }
-        public int ChallengeCount { get; set; }
-        public int AuthenticateCount { get; set; }
-
-        public Task<AuthenticateResult> AuthenticateAsync()
-        {
-            AuthenticateCount++;
-            var principal = new ClaimsPrincipal();
-            var id = new ClaimsIdentity();
-            id.AddClaim(new Claim(ClaimTypes.NameIdentifier, Scheme.Name, ClaimValueTypes.String, Scheme.Name));
-            principal.AddIdentity(id);
-            return Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(principal, new AuthenticationProperties(), Scheme.Name)));
-        }
-
-        public Task ChallengeAsync(AuthenticationProperties properties)
-        {
-            ChallengeCount++;
-            return Task.CompletedTask;
-        }
-
-        public Task ForbidAsync(AuthenticationProperties properties)
-        {
-            ForbidCount++;
-            return Task.CompletedTask;
-        }
-
-        public Task InitializeAsync(AuthenticationScheme scheme, HttpContext context)
-        {
-            Scheme = scheme;
-            return Task.CompletedTask;
-        }
-
-        public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
-        {
-            SignInCount++;
-            return Task.CompletedTask;
-        }
-
-        public Task SignOutAsync(AuthenticationProperties properties)
-        {
-            SignOutCount++;
-            return Task.CompletedTask;
-        }
-    }
-
-    public class TestHandler2 : TestHandler
-    {
-    }
-
-    public class TestHandler3 : TestHandler
-    {
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/TestHttpMessageHandler.cs b/test/Microsoft.AspNetCore.Authentication.Test/TestHttpMessageHandler.cs
deleted file mode 100644
index 5289e3880..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/TestHttpMessageHandler.cs
+++ /dev/null
@@ -1,24 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Net.Http;
-using System.Threading.Tasks;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class TestHttpMessageHandler : HttpMessageHandler
-    {
-        public Func<HttpRequestMessage, HttpResponseMessage> Sender { get; set; }
-
-        protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, System.Threading.CancellationToken cancellationToken)
-        {
-            if (Sender != null)
-            {
-                return Task.FromResult(Sender(request));
-            }
-
-            return Task.FromResult<HttpResponseMessage>(null);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/TicketSerializerTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/TicketSerializerTests.cs
deleted file mode 100644
index a1e58743b..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/TicketSerializerTests.cs
+++ /dev/null
@@ -1,130 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.IO;
-using System.Linq;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Testing.xunit;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class TicketSerializerTests
-    {
-        [Fact]
-        public void CanRoundTripEmptyPrincipal()
-        {
-            var serializer = new TicketSerializer();
-            var properties = new AuthenticationProperties();
-            properties.RedirectUri = "bye";
-            var ticket = new AuthenticationTicket(new ClaimsPrincipal(), properties, "Hello");
-
-            using (var stream = new MemoryStream())
-            using (var writer = new BinaryWriter(stream))
-            using (var reader = new BinaryReader(stream))
-            {
-                serializer.Write(writer, ticket);
-                stream.Position = 0;
-                var readTicket = serializer.Read(reader);
-                Assert.Empty(readTicket.Principal.Identities);
-                Assert.Equal("bye", readTicket.Properties.RedirectUri);
-                Assert.Equal("Hello", readTicket.AuthenticationScheme);
-            }
-        }
-
-        [Fact]
-        public void CanRoundTripBootstrapContext()
-        {
-            var serializer = new TicketSerializer();
-            var properties = new AuthenticationProperties();
-
-            var ticket = new AuthenticationTicket(new ClaimsPrincipal(), properties, "Hello");
-            ticket.Principal.AddIdentity(new ClaimsIdentity("misc") { BootstrapContext = "bootstrap" });
-
-            using (var stream = new MemoryStream())
-            using (var writer = new BinaryWriter(stream))
-            using (var reader = new BinaryReader(stream))
-            {
-                serializer.Write(writer, ticket);
-                stream.Position = 0;
-                var readTicket = serializer.Read(reader);
-                Assert.Single(readTicket.Principal.Identities);
-                Assert.Equal("misc", readTicket.Principal.Identity.AuthenticationType);
-                Assert.Equal("bootstrap", readTicket.Principal.Identities.First().BootstrapContext);
-            }
-        }
-
-        [Fact]
-        public void CanRoundTripActorIdentity()
-        {
-            var serializer = new TicketSerializer();
-            var properties = new AuthenticationProperties();
-
-            var actor = new ClaimsIdentity("actor");
-            var ticket = new AuthenticationTicket(new ClaimsPrincipal(), properties, "Hello");
-            ticket.Principal.AddIdentity(new ClaimsIdentity("misc") { Actor = actor });
-
-            using (var stream = new MemoryStream())
-            using (var writer = new BinaryWriter(stream))
-            using (var reader = new BinaryReader(stream))
-            {
-                serializer.Write(writer, ticket);
-                stream.Position = 0;
-                var readTicket = serializer.Read(reader);
-                Assert.Single(readTicket.Principal.Identities);
-                Assert.Equal("misc", readTicket.Principal.Identity.AuthenticationType);
-
-                var identity = (ClaimsIdentity) readTicket.Principal.Identity;
-                Assert.NotNull(identity.Actor);
-                Assert.Equal("actor", identity.Actor.AuthenticationType);
-            }
-        }
-
-        [ConditionalFact]
-        [FrameworkSkipCondition(
-            RuntimeFrameworks.Mono,
-            SkipReason = "Test fails with Mono 4.0.4. Build rarely reaches testing with Mono 4.2.1")]
-        public void CanRoundTripClaimProperties()
-        {
-            var serializer = new TicketSerializer();
-            var properties = new AuthenticationProperties();
-
-            var claim = new Claim("type", "value", "valueType", "issuer", "original-issuer");
-            claim.Properties.Add("property-1", "property-value");
-
-            // Note: a null value MUST NOT result in a crash
-            // and MUST instead be treated like an empty string.
-            claim.Properties.Add("property-2", null);
-
-            var ticket = new AuthenticationTicket(new ClaimsPrincipal(), properties, "Hello");
-            ticket.Principal.AddIdentity(new ClaimsIdentity(new[] { claim }, "misc"));
-
-            using (var stream = new MemoryStream())
-            using (var writer = new BinaryWriter(stream))
-            using (var reader = new BinaryReader(stream))
-            {
-                serializer.Write(writer, ticket);
-                stream.Position = 0;
-                var readTicket = serializer.Read(reader);
-                Assert.Single(readTicket.Principal.Identities);
-                Assert.Equal("misc", readTicket.Principal.Identity.AuthenticationType);
-
-                var readClaim = readTicket.Principal.FindFirst("type");
-                Assert.NotNull(claim);
-                Assert.Equal("type", claim.Type);
-                Assert.Equal("value", claim.Value);
-                Assert.Equal("valueType", claim.ValueType);
-                Assert.Equal("issuer", claim.Issuer);
-                Assert.Equal("original-issuer", claim.OriginalIssuer);
-
-                var property1 = readClaim.Properties["property-1"];
-                Assert.Equal("property-value", property1);
-
-                var property2 = readClaim.Properties["property-2"];
-                Assert.Equal(string.Empty, property2);
-            }
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/TokenExtensionTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/TokenExtensionTests.cs
deleted file mode 100644
index 4d4023bee..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/TokenExtensionTests.cs
+++ /dev/null
@@ -1,181 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Linq;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class TokenExtensionTests
-    {
-        [Fact]
-        public void CanStoreMultipleTokens()
-        {
-            var props = new AuthenticationProperties();
-            var tokens = new List<AuthenticationToken>();
-            var tok1 = new AuthenticationToken { Name = "One", Value = "1" };
-            var tok2 = new AuthenticationToken { Name = "Two", Value = "2" };
-            var tok3 = new AuthenticationToken { Name = "Three", Value = "3" };
-            tokens.Add(tok1);
-            tokens.Add(tok2);
-            tokens.Add(tok3);
-            props.StoreTokens(tokens);
-
-            Assert.Equal("1", props.GetTokenValue("One"));
-            Assert.Equal("2", props.GetTokenValue("Two"));
-            Assert.Equal("3", props.GetTokenValue("Three"));
-            Assert.Equal(3, props.GetTokens().Count());
-        }
-
-        [Fact]
-        public void SubsequentStoreTokenDeletesPreviousTokens()
-        {
-            var props = new AuthenticationProperties();
-            var tokens = new List<AuthenticationToken>();
-            var tok1 = new AuthenticationToken { Name = "One", Value = "1" };
-            var tok2 = new AuthenticationToken { Name = "Two", Value = "2" };
-            var tok3 = new AuthenticationToken { Name = "Three", Value = "3" };
-            tokens.Add(tok1);
-            tokens.Add(tok2);
-            tokens.Add(tok3);
-
-            props.StoreTokens(tokens);
-
-            props.StoreTokens(new[] { new AuthenticationToken { Name = "Zero", Value = "0" } });
-
-            Assert.Equal("0", props.GetTokenValue("Zero"));
-            Assert.Null(props.GetTokenValue("One"));
-            Assert.Null(props.GetTokenValue("Two"));
-            Assert.Null(props.GetTokenValue("Three"));
-            Assert.Single(props.GetTokens());
-        }
-
-        [Fact]
-        public void CanUpdateTokens()
-        {
-            var props = new AuthenticationProperties();
-            var tokens = new List<AuthenticationToken>();
-            var tok1 = new AuthenticationToken { Name = "One", Value = "1" };
-            var tok2 = new AuthenticationToken { Name = "Two", Value = "2" };
-            var tok3 = new AuthenticationToken { Name = "Three", Value = "3" };
-            tokens.Add(tok1);
-            tokens.Add(tok2);
-            tokens.Add(tok3);
-            props.StoreTokens(tokens);
-
-            tok1.Value = ".1";
-            tok2.Value = ".2";
-            tok3.Value = ".3";
-            props.StoreTokens(tokens);
-
-            Assert.Equal(".1", props.GetTokenValue("One"));
-            Assert.Equal(".2", props.GetTokenValue("Two"));
-            Assert.Equal(".3", props.GetTokenValue("Three"));
-            Assert.Equal(3, props.GetTokens().Count());
-        }
-
-        [Fact]
-        public void CanUpdateTokenValues()
-        {
-            var props = new AuthenticationProperties();
-            var tokens = new List<AuthenticationToken>();
-            var tok1 = new AuthenticationToken { Name = "One", Value = "1" };
-            var tok2 = new AuthenticationToken { Name = "Two", Value = "2" };
-            var tok3 = new AuthenticationToken { Name = "Three", Value = "3" };
-            tokens.Add(tok1);
-            tokens.Add(tok2);
-            tokens.Add(tok3);
-            props.StoreTokens(tokens);
-
-            Assert.True(props.UpdateTokenValue("One", ".11"));
-            Assert.True(props.UpdateTokenValue("Two", ".22"));
-            Assert.True(props.UpdateTokenValue("Three", ".33"));
-
-            Assert.Equal(".11", props.GetTokenValue("One"));
-            Assert.Equal(".22", props.GetTokenValue("Two"));
-            Assert.Equal(".33", props.GetTokenValue("Three"));
-            Assert.Equal(3, props.GetTokens().Count());
-        }
-
-        [Fact]
-        public void UpdateTokenValueReturnsFalseForUnknownToken()
-        {
-            var props = new AuthenticationProperties();
-            var tokens = new List<AuthenticationToken>();
-            var tok1 = new AuthenticationToken { Name = "One", Value = "1" };
-            var tok2 = new AuthenticationToken { Name = "Two", Value = "2" };
-            var tok3 = new AuthenticationToken { Name = "Three", Value = "3" };
-            tokens.Add(tok1);
-            tokens.Add(tok2);
-            tokens.Add(tok3);
-            props.StoreTokens(tokens);
-
-            Assert.False(props.UpdateTokenValue("ONE", ".11"));
-            Assert.False(props.UpdateTokenValue("Jigglypuff", ".11"));
-
-            Assert.Null(props.GetTokenValue("ONE"));
-            Assert.Null(props.GetTokenValue("Jigglypuff"));
-            Assert.Equal(3, props.GetTokens().Count());
-
-        }
-
-        //public class TestAuthHandler : IAuthenticationHandler
-        //{
-        //    private readonly AuthenticationProperties _props;
-        //    public TestAuthHandler(AuthenticationProperties props)
-        //    {
-        //        _props = props;
-        //    }
-
-        //    public Task AuthenticateAsync(AuthenticateContext context)
-        //    {
-        //        context.Authenticated(new ClaimsPrincipal(), _props.Items, new Dictionary<string, object>());
-        //        return Task.FromResult(0);
-        //    }
-
-        //    public Task ChallengeAsync(AuthenticationProperties properties)
-        //    {
-        //        throw new NotImplementedException();
-        //    }
-
-        //    public void GetDescriptions(DescribeSchemesContext context)
-        //    {
-        //        throw new NotImplementedException();
-        //    }
-
-        //    public Task SignInAsync(ClaimsPrincipal principal, AuthenticationProperties properties)
-        //    {
-        //        throw new NotImplementedException();
-        //    }
-
-        //    public Task SignOutAsync(AuthenticationProperties properties)
-        //    {
-        //        throw new NotImplementedException();
-        //    }
-        //}
-
-        //[Fact]
-        //public async Task CanGetTokenFromContext()
-        //{
-        //    var props = new AuthenticationProperties();
-        //    var tokens = new List<AuthenticationToken>();
-        //    var tok1 = new AuthenticationToken { Name = "One", Value = "1" };
-        //    var tok2 = new AuthenticationToken { Name = "Two", Value = "2" };
-        //    var tok3 = new AuthenticationToken { Name = "Three", Value = "3" };
-        //    tokens.Add(tok1);
-        //    tokens.Add(tok2);
-        //    tokens.Add(tok3);
-        //    props.StoreTokens(tokens);
-
-        //    var context = new DefaultHttpContext();
-        //    var handler = new TestAuthHandler(props);
-        //    context.Features.Set<IHttpAuthenticationFeature>(new HttpAuthenticationFeature() { Handler = handler });
-
-        //    Assert.Equal("1", await context.GetTokenAsync("One"));
-        //    Assert.Equal("2", await context.GetTokenAsync("Two"));
-        //    Assert.Equal("3", await context.GetTokenAsync("Three"));
-        //}
-
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/Transaction.cs b/test/Microsoft.AspNetCore.Authentication.Test/Transaction.cs
deleted file mode 100644
index f7128a6f1..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/Transaction.cs
+++ /dev/null
@@ -1,62 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Linq;
-using System.Net.Http;
-using System.Xml.Linq;
-
-namespace Microsoft.AspNetCore.Authentication
-{
-    public class Transaction
-    {
-        public HttpRequestMessage Request { get; set; }
-        public HttpResponseMessage Response { get; set; }
-
-        public IList<string> SetCookie { get; set; }
-
-        public string ResponseText { get; set; }
-        public XElement ResponseElement { get; set; }
-
-        public string AuthenticationCookieValue
-        {
-            get
-            {
-                if (SetCookie != null && SetCookie.Count > 0)
-                {
-                    var authCookie = SetCookie.SingleOrDefault(c => c.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme + "="));
-                    if (authCookie != null)
-                    {
-                        return authCookie.Substring(0, authCookie.IndexOf(';'));
-                    }
-                }
-
-                return null;
-            }
-        }
-
-        public string FindClaimValue(string claimType, string issuer = null)
-        {
-            var claim = ResponseElement.Elements("claim")
-                .SingleOrDefault(elt => elt.Attribute("type").Value == claimType &&
-                    (issuer == null || elt.Attribute("issuer").Value == issuer));
-            if (claim == null)
-            {
-                return null;
-            }
-            return claim.Attribute("value").Value;
-        }
-
-        public string FindTokenValue(string name)
-        {
-            var claim = ResponseElement.Elements("token")
-                .SingleOrDefault(elt => elt.Attribute("name").Value == name);
-            if (claim == null)
-            {
-                return null;
-            }
-            return claim.Attribute("value").Value;
-        }
-
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/TwitterTests.cs b/test/Microsoft.AspNetCore.Authentication.Test/TwitterTests.cs
deleted file mode 100644
index 8eb7a5cd7..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/TwitterTests.cs
+++ /dev/null
@@ -1,372 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved. See License.txt in the project root for license information.
-
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Net.Http.Headers;
-using System;
-using System.Linq;
-using System.Net;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Text;
-using System.Threading.Tasks;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.Twitter
-{
-    public class TwitterTests : RemoteAuthenticationTests<TwitterOptions>
-    {
-        protected override string DefaultScheme => TwitterDefaults.AuthenticationScheme;
-        protected override Type HandlerType => typeof(TwitterHandler);
-        protected override bool SupportsSignIn { get => false; }
-        protected override bool SupportsSignOut { get => false; }
-
-        protected override void RegisterAuth(AuthenticationBuilder services, Action<TwitterOptions> configure)
-        {
-            services.AddTwitter(o =>
-            {
-                ConfigureDefaults(o);
-                configure.Invoke(o);
-            });
-        }
-
-        protected override void ConfigureDefaults(TwitterOptions o)
-        {
-            o.ConsumerKey = "whatever";
-            o.ConsumerSecret = "whatever";
-            o.SignInScheme = "auth1";
-        }
-
-        [Fact]
-        public async Task ChallengeWillTriggerApplyRedirectEvent()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-                o.Events = new TwitterEvents
-                {
-                    OnRedirectToAuthorizationEndpoint = context =>
-                    {
-                        context.Response.Redirect(context.RedirectUri + "&custom=test");
-                        return Task.FromResult(0);
-                    }
-                };
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = BackchannelRequestToken
-                };
-            },
-            async context =>
-            {
-                await context.ChallengeAsync("Twitter");
-                return true;
-            });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var query = transaction.Response.Headers.Location.Query;
-            Assert.Contains("custom=test", query);
-        }
-
-        /// <summary>
-        /// Validates the Twitter Options to check if the Consumer Key is missing in the TwitterOptions and if so throws the ArgumentException
-        /// </summary>
-        /// <returns></returns>
-        [Fact]
-        public async Task ThrowsIfClientIdMissing()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerSecret = "Test Consumer Secret";
-            });
-
-            await Assert.ThrowsAsync<ArgumentException>("ConsumerKey", async () => await server.SendAsync("http://example.com/challenge"));
-        }
-
-        /// <summary>
-        /// Validates the Twitter Options to check if the Consumer Secret is missing in the TwitterOptions and if so throws the ArgumentException
-        /// </summary>
-        /// <returns></returns>
-        [Fact]
-        public async Task ThrowsIfClientSecretMissing()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-            });
-
-            await Assert.ThrowsAsync<ArgumentException>("ConsumerSecret", async () => await server.SendAsync("http://example.com/challenge"));
-        }
-
-        [Fact]
-        public async Task BadSignInWillThrow()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-            });
-
-            // Send a bogus sign in
-            var error = await Assert.ThrowsAnyAsync<Exception>(() => server.SendAsync("https://example.com/signin-twitter"));
-            Assert.Equal("Invalid state cookie.", error.GetBaseException().Message);
-        }
-
-        [Fact]
-        public async Task SignInThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signIn");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task SignOutThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signOut");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ForbidThrows()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-            });
-            var transaction = await server.SendAsync("https://example.com/signOut");
-            Assert.Equal(HttpStatusCode.OK, transaction.Response.StatusCode);
-        }
-
-        [Fact]
-        public async Task ChallengeWillTriggerRedirection()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = BackchannelRequestToken
-                };
-            },
-            async context =>
-            {
-                await context.ChallengeAsync("Twitter");
-                return true;
-            });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.AbsoluteUri;
-            Assert.Contains("https://api.twitter.com/oauth/authenticate?oauth_token=", location);
-        }
-
-        [Fact]
-        public async Task HandleRequestAsync_RedirectsToAccessDeniedPathWhenExplicitlySet()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = BackchannelRequestToken
-                };
-                o.AccessDeniedPath = "/access-denied";
-                o.Events.OnRemoteFailure = context => throw new InvalidOperationException("This event should not be called.");
-            },
-            async context =>
-            {
-                var properties = new AuthenticationProperties();
-                properties.Items["testkey"] = "testvalue";
-                await context.ChallengeAsync("Twitter", properties);
-                return true;
-            });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.AbsoluteUri;
-            Assert.Contains("https://api.twitter.com/oauth/authenticate?oauth_token=", location);
-            Assert.True(transaction.Response.Headers.TryGetValues(HeaderNames.SetCookie, out var setCookie));
-            Assert.True(SetCookieHeaderValue.TryParseList(setCookie.ToList(), out var setCookieValues));
-            Assert.Single(setCookieValues);
-            var setCookieValue = setCookieValues.Single();
-            var cookie = new CookieHeaderValue(setCookieValue.Name, setCookieValue.Value);
-
-            var request = new HttpRequestMessage(HttpMethod.Get, "/signin-twitter?denied=ABCDEFG");
-            request.Headers.Add(HeaderNames.Cookie, cookie.ToString());
-            var client = server.CreateClient();
-            var response = await client.SendAsync(request);
-
-            Assert.Equal(HttpStatusCode.Redirect, response.StatusCode);
-            Assert.Equal("/access-denied?ReturnUrl=%2Fchallenge", response.Headers.Location.ToString());
-        }
-
-        [Fact]
-        public async Task BadCallbackCallsAccessDeniedWithState()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = BackchannelRequestToken
-                };
-                o.Events = new TwitterEvents()
-                {
-                    OnAccessDenied = context =>
-                    {
-                        Assert.NotNull(context.Properties);
-                        Assert.Equal("testvalue", context.Properties.Items["testkey"]);
-                        context.Response.StatusCode = StatusCodes.Status406NotAcceptable;
-                        context.HandleResponse();
-                        return Task.CompletedTask;
-                    }
-                };
-            },
-            async context =>
-            {
-                var properties = new AuthenticationProperties();
-                properties.Items["testkey"] = "testvalue";
-                await context.ChallengeAsync("Twitter", properties);
-                return true;
-            });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.AbsoluteUri;
-            Assert.Contains("https://api.twitter.com/oauth/authenticate?oauth_token=", location);
-            Assert.True(transaction.Response.Headers.TryGetValues(HeaderNames.SetCookie, out var setCookie));
-            Assert.True(SetCookieHeaderValue.TryParseList(setCookie.ToList(), out var setCookieValues));
-            Assert.Single(setCookieValues);
-            var setCookieValue = setCookieValues.Single();
-            var cookie = new CookieHeaderValue(setCookieValue.Name, setCookieValue.Value);
-
-            var request = new HttpRequestMessage(HttpMethod.Get, "/signin-twitter?denied=ABCDEFG");
-            request.Headers.Add(HeaderNames.Cookie, cookie.ToString());
-            var client = server.CreateClient();
-            var response = await client.SendAsync(request);
-
-            Assert.Equal(HttpStatusCode.NotAcceptable, response.StatusCode);
-        }
-
-        [Fact]
-        public async Task BadCallbackCallsRemoteAuthFailedWithState()
-        {
-            var server = CreateServer(o =>
-            {
-                o.ConsumerKey = "Test Consumer Key";
-                o.ConsumerSecret = "Test Consumer Secret";
-                o.BackchannelHttpHandler = new TestHttpMessageHandler
-                {
-                    Sender = BackchannelRequestToken
-                };
-                o.Events = new TwitterEvents()
-                {
-                    OnRemoteFailure = context =>
-                    {
-                        Assert.NotNull(context.Failure);
-                        Assert.Equal("Access was denied by the resource owner or by the remote server.", context.Failure.Message);
-                        Assert.NotNull(context.Properties);
-                        Assert.Equal("testvalue", context.Properties.Items["testkey"]);
-                        context.Response.StatusCode = StatusCodes.Status406NotAcceptable;
-                        context.HandleResponse();
-                        return Task.CompletedTask;
-                    }
-                };
-            },
-            async context =>
-            {
-                var properties = new AuthenticationProperties();
-                properties.Items["testkey"] = "testvalue";
-                await context.ChallengeAsync("Twitter", properties);
-                return true;
-            });
-            var transaction = await server.SendAsync("http://example.com/challenge");
-            Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            var location = transaction.Response.Headers.Location.AbsoluteUri;
-            Assert.Contains("https://api.twitter.com/oauth/authenticate?oauth_token=", location);
-            Assert.True(transaction.Response.Headers.TryGetValues(HeaderNames.SetCookie, out var setCookie));
-            Assert.True(SetCookieHeaderValue.TryParseList(setCookie.ToList(), out var setCookieValues));
-            Assert.Single(setCookieValues);
-            var setCookieValue = setCookieValues.Single();
-            var cookie = new CookieHeaderValue(setCookieValue.Name, setCookieValue.Value);
-
-            var request = new HttpRequestMessage(HttpMethod.Get, "/signin-twitter?denied=ABCDEFG");
-            request.Headers.Add(HeaderNames.Cookie, cookie.ToString());
-            var client = server.CreateClient();
-            var response = await client.SendAsync(request);
-
-            Assert.Equal(HttpStatusCode.NotAcceptable, response.StatusCode);
-        }
-
-        private static TestServer CreateServer(Action<TwitterOptions> options, Func<HttpContext, Task<bool>> handler = null)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Use(async (context, next) =>
-                    {
-                        var req = context.Request;
-                        var res = context.Response;
-                        if (req.Path == new PathString("/signIn"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignInAsync("Twitter", new ClaimsPrincipal()));
-                        }
-                        else if (req.Path == new PathString("/signOut"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.SignOutAsync("Twitter"));
-                        }
-                        else if (req.Path == new PathString("/forbid"))
-                        {
-                            await Assert.ThrowsAsync<InvalidOperationException>(() => context.ForbidAsync("Twitter"));
-                        }
-                        else if (handler == null || ! await handler(context))
-                        {
-                            await next();
-                        }
-                    });
-                })
-                .ConfigureServices(services =>
-                {
-                    Action<TwitterOptions> wrapOptions = o =>
-                    {
-                        o.SignInScheme = "External";
-                        options(o);
-                    };
-                    services.AddAuthentication()
-                        .AddCookie("External", _ => { })
-                        .AddTwitter(wrapOptions);
-                });
-            return new TestServer(builder);
-        }
-
-        private HttpResponseMessage BackchannelRequestToken(HttpRequestMessage req)
-        {
-            if (req.RequestUri.AbsoluteUri == "https://api.twitter.com/oauth/request_token")
-            {
-                return new HttpResponseMessage(HttpStatusCode.OK)
-                {
-                    Content =
-                        new StringContent("oauth_callback_confirmed=true&oauth_token=test_oauth_token&oauth_token_secret=test_oauth_token_secret",
-                            Encoding.UTF8,
-                            "application/x-www-form-urlencoded")
-                };
-            }
-            throw new NotImplementedException(req.RequestUri.AbsoluteUri);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/CustomStateDataFormat.cs b/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/CustomStateDataFormat.cs
deleted file mode 100644
index 0de867d28..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/CustomStateDataFormat.cs
+++ /dev/null
@@ -1,58 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.IO;
-using System.Runtime.Serialization;
-using System.Text;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    public class CustomStateDataFormat : ISecureDataFormat<AuthenticationProperties>
-    {
-        public const string ValidStateData = "ValidStateData";
-
-        private string lastSavedAuthenticationProperties;
-        private DataContractSerializer serializer = new DataContractSerializer(typeof(AuthenticationProperties));
-
-        public string Protect(AuthenticationProperties data)
-        {
-            lastSavedAuthenticationProperties = Serialize(data);
-            return ValidStateData;
-        }
-
-        public string Protect(AuthenticationProperties data, string purpose)
-        {
-            return Protect(data);
-        }
-
-        public AuthenticationProperties Unprotect(string state)
-        {
-            return state == ValidStateData ? DeSerialize(lastSavedAuthenticationProperties) : null;
-        }
-
-        public AuthenticationProperties Unprotect(string protectedText, string purpose)
-        {
-            return Unprotect(protectedText);
-        }
-
-        private string Serialize(AuthenticationProperties data)
-        {
-            using (MemoryStream memoryStream = new MemoryStream())
-            {
-                serializer.WriteObject(memoryStream, data);
-                memoryStream.Position = 0;
-                return new StreamReader(memoryStream).ReadToEnd();
-            }
-        }
-
-        private AuthenticationProperties DeSerialize(string state)
-        {
-            var stateDataAsBytes = Encoding.UTF8.GetBytes(state);
-
-            using (var ms = new MemoryStream(stateDataAsBytes, false))
-            {
-                return (AuthenticationProperties)serializer.ReadObject(ms);
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/InvalidToken.xml b/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/InvalidToken.xml
deleted file mode 100644
index dfdb0d68d..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/InvalidToken.xml
+++ /dev/null
@@ -1,83 +0,0 @@
-<t:RequestSecurityTokenResponse Context="WsFedOwinState=AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAzaTmu3688ESVbKJen1i8YwAAAAACAAAAAAADZgAAwAAAABAAAADoUPrFjHqMTp30emvI0XZ_AAAAAASAAACgAAAAEAAAAGTBC8oT24BI8BSJf4SbwjowAAAAA4ip7JyKg6vyK-PtWTapIASA3XLOXiIj8KFO3cuSd4t4H4o-W_wnQl2FAKMOKNNrFAAAAEoWRHnCSYvPKPo0kU09EciG6TJS" xmlns:t="http://schemas.xmlsoap.org/ws/2005/02/trust">
-  <t:Lifetime>
-    <wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2014-04-18T20:21:17.341Z</wsu:Created>
-    <wsu:Expires xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2014-04-19T08:21:17.341Z</wsu:Expires>
-  </t:Lifetime>
-  <wsp:AppliesTo xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
-    <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
-      <Address>http://automation1/</Address>
-    </EndpointReference>
-  </wsp:AppliesTo>
-  <t:RequestedSecurityToken>
-    <Assertion ID="_660ec874-f70a-4997-a9c4-bd591f1c7469" IssueInstant="2014-04-18T20:21:17.450Z" Version="2.0" xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
-      <Issuer>https://sts.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/</Issuer>
-      <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-        <ds:SignedInfo>
-          <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
-          <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
-          <ds:Reference URI="#_660ec874-f70a-4997-a9c4-bd591f1c7469">
-            <ds:Transforms>
-              <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
-              <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
-            </ds:Transforms>
-            <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
-            <ds:DigestValue>Lkq0wTyTFxLUU2cyx0XybJqhka5RzRGj6kC4aIpFg+g=</ds:DigestValue>
-          </ds:Reference>
-        </ds:SignedInfo>
-        <ds:SignatureValue>bPwNswOB/B9xcdAljIkin9A2vjq+u94JdyvK03mf8vZFGUYNu9uN/Q6ims1DvW1FnP7SgFBwhIvW5OjZyW8fdYGhC2bq36izkxH6ulkWbciOcyELkyHDACLudvh8kP/Q+IwpicefKzAeI2Qu/5MFq16vFg5YgI+dovg8u1fYPPEPmmptW893RNTHWeh9mLRpLYnHyg7aLG6emNRkEu7w9rzeoICeMFybb9BvJl/q/8MFCW/Z5WemQhCi6YXFSEwCO6zJzCFi/3T6ChU/xYgXbFykDLqulsNOCQxdgutyqxJzugt+3PH5IKHHuoqe7UZNUIyELJ4BgwE1sXCGYIi24rg==</ds:SignatureValue>
-        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-          <X509Data>
-            <X509Certificate>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</X509Certificate>
-          </X509Data>
-        </KeyInfo>
-      </ds:Signature>
-      <Subject>
-        <NameID>t0ch1TsP0pi5VoW8q5CGWsCXVZoNtpsg0mbMZPOYb4I</NameID>
-        <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer" />
-      </Subject>
-      <Conditions NotBefore="2014-04-18T20:21:17.341Z" NotOnOrAfter="2014-04-19T08:21:17.341Z">
-        <AudienceRestriction>
-          <Audience>http://Automation1</Audience>
-        </AudienceRestriction>
-      </Conditions>
-      <AttributeStatement>
-        <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname">
-          <AttributeValue>Test</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname">
-          <AttributeValue>Test</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name">
-          <AttributeValue>user1@praburajgmail.onmicrosoft.com</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.microsoft.com/identity/claims/tenantid">
-          <AttributeValue>4afbc689-805b-48cf-a24c-d4aa3248a248</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.microsoft.com/identity/claims/objectidentifier">
-          <AttributeValue>c2f0cd49-5e53-4520-8ed9-4e178dc488c5</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.microsoft.com/identity/claims/identityprovider">
-          <AttributeValue>https://sts.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/</AttributeValue>
-        </Attribute>
-      </AttributeStatement>
-      <AuthnStatement AuthnInstant="2014-04-18T20:21:14.000Z">
-        <AuthnContext>
-          <AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</AuthnContextClassRef>
-        </AuthnContext>
-      </AuthnStatement>
-    </Assertion>
-  </t:RequestedSecurityToken>
-  <t:RequestedAttachedReference>
-    <SecurityTokenReference d3p1:TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0" xmlns:d3p1="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
-      <KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID">_660ec874-f70a-4997-a9c4-bd591f1c7469</KeyIdentifier>
-    </SecurityTokenReference>
-  </t:RequestedAttachedReference>
-  <t:RequestedUnattachedReference>
-    <SecurityTokenReference d3p1:TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0" xmlns:d3p1="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
-      <KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID">_660ec874-f70a-4997-a9c4-bd591f1c7469</KeyIdentifier>
-    </SecurityTokenReference>
-  </t:RequestedUnattachedReference>
-  <t:TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0</t:TokenType>
-  <t:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</t:RequestType>
-  <t:KeyType>http://schemas.xmlsoap.org/ws/2005/05/identity/NoProofKey</t:KeyType>
-</t:RequestSecurityTokenResponse>
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/TestSecurityToken.cs b/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/TestSecurityToken.cs
deleted file mode 100644
index dfe860724..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/TestSecurityToken.cs
+++ /dev/null
@@ -1,27 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.IdentityModel.Tokens;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    internal class TestSecurityToken : SecurityToken
-    {
-        public override string Id => "id";
-
-        public override string Issuer => "issuer";
-
-        public override SecurityKey SecurityKey => throw new NotImplementedException();
-
-        public override SecurityKey SigningKey
-        {
-            get => throw new NotImplementedException();
-            set => throw new NotImplementedException();
-        }
-
-        public override DateTime ValidFrom => new DateTime(2008, 3, 22);
-
-        public override DateTime ValidTo => new DateTime(2017, 3, 22);
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/TestSecurityTokenValidator.cs b/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/TestSecurityTokenValidator.cs
deleted file mode 100644
index 05882518f..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/TestSecurityTokenValidator.cs
+++ /dev/null
@@ -1,31 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Security.Claims;
-using Microsoft.IdentityModel.Tokens;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    internal class TestSecurityTokenValidator : ISecurityTokenValidator
-    {
-        public bool CanValidateToken => true;
-
-        public int MaximumTokenSizeInBytes { get; set; } = 1024 * 5;
-
-        public bool CanReadToken(string securityToken)
-        {
-            return true;
-        }
-
-        public ClaimsPrincipal ValidateToken(string securityToken, TokenValidationParameters validationParameters, out SecurityToken validatedToken)
-        {
-            if (!string.IsNullOrEmpty(securityToken) && securityToken.Contains("ThisIsAValidToken"))
-            {
-                validatedToken = new TestSecurityToken();
-                return new ClaimsPrincipal(new ClaimsIdentity("Test"));
-            }
-
-            throw new SecurityTokenException("The security token did not contain ThisIsAValidToken");
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/ValidToken.xml b/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/ValidToken.xml
deleted file mode 100644
index 2addae96c..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/ValidToken.xml
+++ /dev/null
@@ -1,83 +0,0 @@
-<t:RequestSecurityTokenResponse Context="WsFedOwinState=AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAzaTmu3688ESVbKJen1i8YwAAAAACAAAAAAADZgAAwAAAABAAAADoUPrFjHqMTp30emvI0XZ_AAAAAASAAACgAAAAEAAAAGTBC8oT24BI8BSJf4SbwjowAAAAA4ip7JyKg6vyK-PtWTapIASA3XLOXiIj8KFO3cuSd4t4H4o-W_wnQl2FAKMOKNNrFAAAAEoWRHnCSYvPKPo0kU09EciG6TJS" xmlns:t="http://schemas.xmlsoap.org/ws/2005/02/trust">
-  <t:Lifetime>
-    <wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2014-04-18T20:21:17.341Z</wsu:Created>
-    <wsu:Expires xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2014-04-19T08:21:17.341Z</wsu:Expires>
-  </t:Lifetime>
-  <wsp:AppliesTo xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
-    <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
-      <Address>http://automation1/</Address>
-    </EndpointReference>
-  </wsp:AppliesTo>
-  <t:RequestedSecurityToken>
-    <Assertion ID="_660ec874-f70a-4997-a9c4-bd591f1c7469" IssueInstant="2014-04-18T20:21:17.450Z" Version="2.0" xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
-      <Issuer>https://sts.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/</Issuer>
-      <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-        <ds:SignedInfo>
-          <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
-          <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
-          <ds:Reference URI="#_660ec874-f70a-4997-a9c4-bd591f1c7469">
-            <ds:Transforms>
-              <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
-              <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
-            </ds:Transforms>
-            <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
-            <ds:DigestValue>Lkq0wTyTFxLUU2cyx0XybJqhka5RzRGj6kC4aIpFg+g=</ds:DigestValue>
-          </ds:Reference>
-        </ds:SignedInfo>
-        <ds:SignatureValue>bPwNswOB/B9xcdAljIkin9A2vjq+u94JdyvK03mf8vZFGUYNu9uN/Q6ims1DvW1FnP7SgFBwhIvW5OjZyW8fdYGhC2bq36izkxH6ulkWbciOcyELkyHDACLudvh8kP/Q+IwpicefKzAeI2Qu/5MFq16vFg5YgI+dovg8u1fYPPEPmmptW893RNTHWeh9mLRpLYnHyg7aLG6emNRkEu7w9rzeoICeMFybb9BvJl/q/8MFCW/Z5WemQhCi6YXFSEwCO6zJzCFi/3T6ChU/xYgXbFykDLqulsNOCQxdgutyqxJzugt+3PH5IKHHuoqe7UZNUIyELJ4BgwE1sXCGYIi24rg==</ds:SignatureValue>
-        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-          <X509Data>
-            <X509Certificate>ThisIsAValidToken</X509Certificate>
-          </X509Data>
-        </KeyInfo>
-      </ds:Signature>
-      <Subject>
-        <NameID>t0ch1TsP0pi5VoW8q5CGWsCXVZoNtpsg0mbMZPOYb4I</NameID>
-        <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer" />
-      </Subject>
-      <Conditions NotBefore="2014-04-18T20:21:17.341Z" NotOnOrAfter="2014-04-19T08:21:17.341Z">
-        <AudienceRestriction>
-          <Audience>http://Automation1</Audience>
-        </AudienceRestriction>
-      </Conditions>
-      <AttributeStatement>
-        <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname">
-          <AttributeValue>Test</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname">
-          <AttributeValue>Test</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name">
-          <AttributeValue>user1@praburajgmail.onmicrosoft.com</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.microsoft.com/identity/claims/tenantid">
-          <AttributeValue>4afbc689-805b-48cf-a24c-d4aa3248a248</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.microsoft.com/identity/claims/objectidentifier">
-          <AttributeValue>c2f0cd49-5e53-4520-8ed9-4e178dc488c5</AttributeValue>
-        </Attribute>
-        <Attribute Name="http://schemas.microsoft.com/identity/claims/identityprovider">
-          <AttributeValue>https://sts.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/</AttributeValue>
-        </Attribute>
-      </AttributeStatement>
-      <AuthnStatement AuthnInstant="2014-04-18T20:21:14.000Z">
-        <AuthnContext>
-          <AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</AuthnContextClassRef>
-        </AuthnContext>
-      </AuthnStatement>
-    </Assertion>
-  </t:RequestedSecurityToken>
-  <t:RequestedAttachedReference>
-    <SecurityTokenReference d3p1:TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0" xmlns:d3p1="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
-      <KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID">_660ec874-f70a-4997-a9c4-bd591f1c7469</KeyIdentifier>
-    </SecurityTokenReference>
-  </t:RequestedAttachedReference>
-  <t:RequestedUnattachedReference>
-    <SecurityTokenReference d3p1:TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0" xmlns:d3p1="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
-      <KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID">_660ec874-f70a-4997-a9c4-bd591f1c7469</KeyIdentifier>
-    </SecurityTokenReference>
-  </t:RequestedUnattachedReference>
-  <t:TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0</t:TokenType>
-  <t:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</t:RequestType>
-  <t:KeyType>http://schemas.xmlsoap.org/ws/2005/05/identity/NoProofKey</t:KeyType>
-</t:RequestSecurityTokenResponse>
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/WsFederationTest.cs b/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/WsFederationTest.cs
deleted file mode 100644
index bc1ef757f..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/WsFederationTest.cs
+++ /dev/null
@@ -1,443 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.IO;
-using System.Linq;
-using System.Net;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Text;
-using System.Threading;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Extensions;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.AspNetCore.WebUtilities;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.IdentityModel.Tokens;
-using Microsoft.Net.Http.Headers;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authentication.WsFederation
-{
-    public class WsFederationTest
-    {
-        [Fact]
-        public async Task VerifySchemeDefaults()
-        {
-            var services = new ServiceCollection();
-            services.AddAuthentication().AddWsFederation();
-            var sp = services.BuildServiceProvider();
-            var schemeProvider = sp.GetRequiredService<IAuthenticationSchemeProvider>();
-            var scheme = await schemeProvider.GetSchemeAsync(WsFederationDefaults.AuthenticationScheme);
-            Assert.NotNull(scheme);
-            Assert.Equal("WsFederationHandler", scheme.HandlerType.Name);
-            Assert.Equal(WsFederationDefaults.AuthenticationScheme, scheme.DisplayName);
-        }
-
-        [Fact]
-        public async Task MissingConfigurationThrows()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(ConfigureApp)
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication(sharedOptions =>
-                    {
-                        sharedOptions.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        sharedOptions.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        sharedOptions.DefaultChallengeScheme = WsFederationDefaults.AuthenticationScheme;
-                    })
-                    .AddCookie()
-                    .AddWsFederation();
-                });
-            var server = new TestServer(builder);
-            var httpClient = server.CreateClient();
-
-            // Verify if the request is redirected to STS with right parameters
-            var exception = await Assert.ThrowsAsync<InvalidOperationException>(() => httpClient.GetAsync("/"));
-            Assert.Equal("Provide MetadataAddress, Configuration, or ConfigurationManager to WsFederationOptions", exception.Message);
-        }
-
-        [Fact]
-        public async Task ChallengeRedirects()
-        {
-            var httpClient = CreateClient();
-
-            // Verify if the request is redirected to STS with right parameters
-            var response = await httpClient.GetAsync("/");
-            Assert.Equal("https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/wsfed", response.Headers.Location.GetLeftPart(System.UriPartial.Path));
-            var queryItems = QueryHelpers.ParseQuery(response.Headers.Location.Query);
-
-            Assert.Equal("http://Automation1", queryItems["wtrealm"]);
-            Assert.True(queryItems["wctx"].ToString().Equals(CustomStateDataFormat.ValidStateData), "wctx does not equal ValidStateData");
-            Assert.Equal(httpClient.BaseAddress + "signin-wsfed", queryItems["wreply"]);
-            Assert.Equal("wsignin1.0", queryItems["wa"]);
-        }
-
-        [Fact]
-        public async Task MapWillNotAffectRedirect()
-        {
-            var httpClient = CreateClient();
-
-            // Verify if the request is redirected to STS with right parameters
-            var response = await httpClient.GetAsync("/mapped-challenge");
-            Assert.Equal("https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/wsfed", response.Headers.Location.GetLeftPart(System.UriPartial.Path));
-            var queryItems = QueryHelpers.ParseQuery(response.Headers.Location.Query);
-
-            Assert.Equal("http://Automation1", queryItems["wtrealm"]);
-            Assert.True(queryItems["wctx"].ToString().Equals(CustomStateDataFormat.ValidStateData), "wctx does not equal ValidStateData");
-            Assert.Equal(httpClient.BaseAddress + "signin-wsfed", queryItems["wreply"]);
-            Assert.Equal("wsignin1.0", queryItems["wa"]);
-        }
-
-        [Fact]
-        public async Task PreMappedWillAffectRedirect()
-        {
-            var httpClient = CreateClient();
-
-            // Verify if the request is redirected to STS with right parameters
-            var response = await httpClient.GetAsync("/premapped-challenge");
-            Assert.Equal("https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/wsfed", response.Headers.Location.GetLeftPart(System.UriPartial.Path));
-            var queryItems = QueryHelpers.ParseQuery(response.Headers.Location.Query);
-
-            Assert.Equal("http://Automation1", queryItems["wtrealm"]);
-            Assert.True(queryItems["wctx"].ToString().Equals(CustomStateDataFormat.ValidStateData), "wctx does not equal ValidStateData");
-            Assert.Equal(httpClient.BaseAddress + "premapped-challenge/signin-wsfed", queryItems["wreply"]);
-            Assert.Equal("wsignin1.0", queryItems["wa"]);
-        }
-
-        [Fact]
-        public async Task ValidTokenIsAccepted()
-        {
-            var httpClient = CreateClient();
-
-            // Verify if the request is redirected to STS with right parameters
-            var response = await httpClient.GetAsync("/");
-            var queryItems = QueryHelpers.ParseQuery(response.Headers.Location.Query);
-
-            var request = new HttpRequestMessage(HttpMethod.Post, queryItems["wreply"]);
-            CopyCookies(response, request);
-            request.Content = CreateSignInContent("WsFederation/ValidToken.xml", queryItems["wctx"]);
-            response = await httpClient.SendAsync(request);
-
-            Assert.Equal(HttpStatusCode.Found, response.StatusCode);
-
-            request = new HttpRequestMessage(HttpMethod.Get, response.Headers.Location);
-            CopyCookies(response, request);
-            response = await httpClient.SendAsync(request);
-
-            // Did the request end in the actual resource requested for
-            Assert.Equal(WsFederationDefaults.AuthenticationScheme, await response.Content.ReadAsStringAsync());
-        }
-
-        [Fact]
-        public async Task ValidUnsolicitedTokenIsRefused()
-        {
-            var httpClient = CreateClient();
-            var form = CreateSignInContent("WsFederation/ValidToken.xml", suppressWctx: true);
-            var exception = await Assert.ThrowsAsync<Exception>(() => httpClient.PostAsync(httpClient.BaseAddress + "signin-wsfed", form));
-            Assert.Contains("Unsolicited logins are not allowed.", exception.InnerException.Message);
-        }
-
-        [Fact]
-        public async Task ValidUnsolicitedTokenIsAcceptedWhenAllowed()
-        {
-            var httpClient = CreateClient(allowUnsolicited: true);
-
-            var form = CreateSignInContent("WsFederation/ValidToken.xml", suppressWctx: true);
-            var response = await httpClient.PostAsync(httpClient.BaseAddress + "signin-wsfed", form);
-
-            Assert.Equal(HttpStatusCode.Found, response.StatusCode);
-
-            var request = new HttpRequestMessage(HttpMethod.Get, response.Headers.Location);
-            CopyCookies(response, request);
-            response = await httpClient.SendAsync(request);
-
-            // Did the request end in the actual resource requested for
-            Assert.Equal(WsFederationDefaults.AuthenticationScheme, await response.Content.ReadAsStringAsync());
-        }
-
-        [Fact]
-        public async Task InvalidTokenIsRejected()
-        {
-            var httpClient = CreateClient();
-
-            // Verify if the request is redirected to STS with right parameters
-            var response = await httpClient.GetAsync("/");
-            var queryItems = QueryHelpers.ParseQuery(response.Headers.Location.Query);
-
-            var request = new HttpRequestMessage(HttpMethod.Post, queryItems["wreply"]);
-            CopyCookies(response, request);
-            request.Content = CreateSignInContent("WsFederation/InvalidToken.xml", queryItems["wctx"]);
-            response = await httpClient.SendAsync(request);
-
-            // Did the request end in the actual resource requested for
-            Assert.Equal("AuthenticationFailed", await response.Content.ReadAsStringAsync());
-        }
-
-        [Fact]
-        public async Task RemoteSignoutRequestTriggersSignout()
-        {
-            var httpClient = CreateClient();
-
-            var response = await httpClient.GetAsync("/signin-wsfed?wa=wsignoutcleanup1.0");
-            response.EnsureSuccessStatusCode();
-
-            var cookie = response.Headers.GetValues(HeaderNames.SetCookie).Single();
-            Assert.Equal(".AspNetCore.Cookies=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; samesite=lax", cookie);
-            Assert.Equal("OnRemoteSignOut", response.Headers.GetValues("EventHeader").Single());
-            Assert.Equal("", await response.Content.ReadAsStringAsync());
-        }
-
-        [Fact]
-        public async Task EventsResolvedFromDI()
-        {
-            var builder = new WebHostBuilder()
-                .ConfigureServices(services =>
-                {
-                    services.AddSingleton<MyWsFedEvents>();
-                    services.AddAuthentication(sharedOptions =>
-                    {
-                        sharedOptions.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        sharedOptions.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        sharedOptions.DefaultChallengeScheme = WsFederationDefaults.AuthenticationScheme;
-                    })
-                    .AddCookie()
-                    .AddWsFederation(options =>
-                    {
-                        options.Wtrealm = "http://Automation1";
-                        options.MetadataAddress = "https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/federationmetadata/2007-06/federationmetadata.xml";
-                        options.BackchannelHttpHandler = new WaadMetadataDocumentHandler();
-                        options.EventsType = typeof(MyWsFedEvents);
-                    });
-                })
-                .Configure(app =>
-                {
-                    app.Run(context => context.ChallengeAsync());
-                });
-            var server = new TestServer(builder);
-
-            var result = await server.CreateClient().GetAsync("");
-            Assert.Contains("CustomKey=CustomValue", result.Headers.Location.Query);
-        }
-
-        private class MyWsFedEvents : WsFederationEvents
-        {
-            public override Task RedirectToIdentityProvider(RedirectContext context)
-            {
-                context.ProtocolMessage.SetParameter("CustomKey", "CustomValue");
-                return base.RedirectToIdentityProvider(context);
-            }
-        }
-
-        private FormUrlEncodedContent CreateSignInContent(string tokenFile, string wctx = null, bool suppressWctx = false)
-        {
-            var kvps = new List<KeyValuePair<string, string>>();
-            kvps.Add(new KeyValuePair<string, string>("wa", "wsignin1.0"));
-            kvps.Add(new KeyValuePair<string, string>("wresult", File.ReadAllText(tokenFile)));
-            if (!string.IsNullOrEmpty(wctx))
-            {
-                kvps.Add(new KeyValuePair<string, string>("wctx", wctx));
-            }
-            if (suppressWctx)
-            {
-                kvps.Add(new KeyValuePair<string, string>("suppressWctx", "true"));
-            }
-            return new FormUrlEncodedContent(kvps);
-        }
-
-        private void CopyCookies(HttpResponseMessage response, HttpRequestMessage request)
-        {
-            var cookies = SetCookieHeaderValue.ParseList(response.Headers.GetValues(HeaderNames.SetCookie).ToList());
-            foreach (var cookie in cookies)
-            {
-                if (cookie.Value.HasValue)
-                {
-                    request.Headers.Add(HeaderNames.Cookie, new CookieHeaderValue(cookie.Name, cookie.Value).ToString());
-                }
-            }
-        }
-
-        private HttpClient CreateClient(bool allowUnsolicited = false)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(ConfigureApp)
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication(sharedOptions =>
-                    {
-                        sharedOptions.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        sharedOptions.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
-                        sharedOptions.DefaultChallengeScheme = WsFederationDefaults.AuthenticationScheme;
-                    })
-                    .AddCookie()
-                    .AddWsFederation(options =>
-                    {
-                        options.Wtrealm = "http://Automation1";
-                        options.MetadataAddress = "https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/federationmetadata/2007-06/federationmetadata.xml";
-                        options.BackchannelHttpHandler = new WaadMetadataDocumentHandler();
-                        options.StateDataFormat = new CustomStateDataFormat();
-                        options.SecurityTokenHandlers = new List<ISecurityTokenValidator>() { new TestSecurityTokenValidator() };
-                        options.UseTokenLifetime = false;
-                        options.AllowUnsolicitedLogins = allowUnsolicited;
-                        options.Events = new WsFederationEvents()
-                        {
-                            OnMessageReceived = context =>
-                            {
-                                if (!context.ProtocolMessage.Parameters.TryGetValue("suppressWctx", out var suppress))
-                                {
-                                    Assert.True(context.ProtocolMessage.Wctx.Equals("customValue"), "wctx is not my custom value");
-                                }
-                                context.HttpContext.Items["MessageReceived"] = true;
-                                return Task.FromResult(0);
-                            },
-                            OnRedirectToIdentityProvider = context =>
-                            {
-                                if (context.ProtocolMessage.IsSignInMessage)
-                                {
-                                    // Sign in message
-                                    context.ProtocolMessage.Wctx = "customValue";
-                                }
-
-                                return Task.FromResult(0);
-                            },
-                            OnSecurityTokenReceived = context =>
-                            {
-                                context.HttpContext.Items["SecurityTokenReceived"] = true;
-                                return Task.FromResult(0);
-                            },
-                            OnSecurityTokenValidated = context =>
-                            {
-                                Assert.True((bool)context.HttpContext.Items["MessageReceived"], "MessageReceived notification not invoked");
-                                Assert.True((bool)context.HttpContext.Items["SecurityTokenReceived"], "SecurityTokenReceived notification not invoked");
-
-                                if (context.Principal != null)
-                                {
-                                    var identity = context.Principal.Identities.Single();
-                                    identity.AddClaim(new Claim("ReturnEndpoint", "true"));
-                                    identity.AddClaim(new Claim("Authenticated", "true"));
-                                    identity.AddClaim(new Claim(identity.RoleClaimType, "Guest", ClaimValueTypes.String));
-                                }
-
-                                return Task.FromResult(0);
-                            },
-                            OnAuthenticationFailed = context =>
-                            {
-                                context.HttpContext.Items["AuthenticationFailed"] = true;
-                                //Change the request url to something different and skip Wsfed. This new url will handle the request and let us know if this notification was invoked.
-                                context.HttpContext.Request.Path = new PathString("/AuthenticationFailed");
-                                context.SkipHandler();
-                                return Task.FromResult(0);
-                            },
-                            OnRemoteSignOut = context =>
-                            {
-                                context.Response.Headers["EventHeader"] = "OnRemoteSignOut";
-                                return Task.FromResult(0);
-                            }
-                        };
-                    });
-                });
-            var server = new TestServer(builder);
-            return server.CreateClient();
-        }
-
-        private void ConfigureApp(IApplicationBuilder app)
-        {
-            app.Map("/PreMapped-Challenge", mapped =>
-            {
-                mapped.UseAuthentication();
-                mapped.Run(async context =>
-                {
-                    await context.ChallengeAsync(WsFederationDefaults.AuthenticationScheme);
-                });
-            });
-
-            app.UseAuthentication();
-
-            app.Map("/Logout", subApp =>
-                {
-                    subApp.Run(async context =>
-                        {
-                            if (context.User.Identity.IsAuthenticated)
-                            {
-                                var authProperties = new AuthenticationProperties() { RedirectUri = context.Request.GetEncodedUrl() };
-                                await context.SignOutAsync(WsFederationDefaults.AuthenticationScheme, authProperties);
-                                await context.Response.WriteAsync("Signing out...");
-                            }
-                            else
-                            {
-                                await context.Response.WriteAsync("SignedOut");
-                            }
-                        });
-                });
-
-            app.Map("/AuthenticationFailed", subApp =>
-            {
-                subApp.Run(async context =>
-                {
-                    await context.Response.WriteAsync("AuthenticationFailed");
-                });
-            });
-
-            app.Map("/signout-wsfed", subApp =>
-            {
-                subApp.Run(async context =>
-                {
-                    await context.Response.WriteAsync("signout-wsfed");
-                });
-            });
-
-            app.Map("/mapped-challenge", subApp =>
-            {
-                subApp.Run(async context =>
-                {
-                    await context.ChallengeAsync(WsFederationDefaults.AuthenticationScheme);
-                });
-            });
-
-            app.Run(async context =>
-            {
-                var result = context.AuthenticateAsync();
-                if (context.User == null || !context.User.Identity.IsAuthenticated)
-                {
-                    await context.ChallengeAsync(WsFederationDefaults.AuthenticationScheme);
-                    await context.Response.WriteAsync("Unauthorized");
-                }
-                else
-                {
-                    var identity = context.User.Identities.Single();
-                    if (identity.NameClaimType == "Name_Failed" && identity.RoleClaimType == "Role_Failed")
-                    {
-                        context.Response.StatusCode = 500;
-                        await context.Response.WriteAsync("SignIn_Failed");
-                    }
-                    else if (!identity.HasClaim("Authenticated", "true") || !identity.HasClaim("ReturnEndpoint", "true") || !identity.HasClaim(identity.RoleClaimType, "Guest"))
-                    {
-                        await context.Response.WriteAsync("Provider not invoked");
-                        return;
-                    }
-                    else
-                    {
-                        await context.Response.WriteAsync(WsFederationDefaults.AuthenticationScheme);
-                    }
-                }
-            });
-        }
-
-        private class WaadMetadataDocumentHandler : HttpMessageHandler
-        {
-            protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
-            {
-                var metadata = File.ReadAllText(@"WsFederation/federationmetadata.xml");
-                var newResponse = new HttpResponseMessage() { Content = new StringContent(metadata, Encoding.UTF8, "text/xml") };
-                return Task.FromResult<HttpResponseMessage>(newResponse);
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/federationmetadata.xml b/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/federationmetadata.xml
deleted file mode 100644
index 920ed66a4..000000000
--- a/test/Microsoft.AspNetCore.Authentication.Test/WsFederation/federationmetadata.xml
+++ /dev/null
@@ -1,132 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<EntityDescriptor ID="_4d16ee22-bedb-4eca-a532-1e5551c7d66e" entityID="https://sts.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
-  <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-    <ds:SignedInfo>
-      <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
-      <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
-      <ds:Reference URI="#_4d16ee22-bedb-4eca-a532-1e5551c7d66e">
-        <ds:Transforms>
-          <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
-          <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
-        </ds:Transforms>
-        <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
-        <ds:DigestValue>wFJy/A1QstqtLHauYGcqwwHvn3HUW25DcWI/XLOmXOM=</ds:DigestValue>
-      </ds:Reference>
-    </ds:SignedInfo>
-    <ds:SignatureValue>R6fPw+BiFS9XYdkhwNJRjGxVftA2j9TdkF5d5jgR8uG1QMyuEA/Eizeq1HnnUj2Yi+sqNG+HzaZQclECeiJfi88Ry+keorDCo9KgdnjlZZc+WFzrJZeHjaDIvFD6B4OAN0mTq5kbpwr7+idzSbvyRXAnpvJxOrViZKE4HpwltGAZGDTkjsVkd8Z/wfoN7ehN4Ei7u/mOAiEU4FkWYFU/BfSVRVIUDyyQ7DGfQFJvCwHWFvsq+M1wfOUzQO5K+M9EU2m4VEP1qqbexXaZMAbcjqyUn4eN7doWjWE59jkXGbn+GR8qgCJqLOaYwXnH5XD0pMjy71aKGyLNaUb3wCwjkA==</ds:SignatureValue>
-    <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-      <X509Data>
-        <X509Certificate>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</X509Certificate>
-      </X509Data>
-    </KeyInfo>
-  </ds:Signature>
-  <RoleDescriptor xsi:type="fed:SecurityTokenServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706">
-    <KeyDescriptor use="signing">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>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</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
-    <KeyDescriptor use="signing">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>MIIDPjCCAiqgAwIBAgIQVWmXY/+9RqFA/OG9kFulHDAJBgUrDgMCHQUAMC0xKzApBgNVBAMTImFjY291bnRzLmFjY2Vzc2NvbnRyb2wud2luZG93cy5uZXQwHhcNMTIwNjA3MDcwMDAwWhcNMTQwNjA3MDcwMDAwWjAtMSswKQYDVQQDEyJhY2NvdW50cy5hY2Nlc3Njb250cm9sLndpbmRvd3MubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCz8Sn3GGXmikH2MdTeGY1D711EORX/lVXpr+ecGgqfUWF8MPB07XkYuJ54DAuYT318+2XrzMjOtqkT94VkXmxv6dFGhG8YZ8vNMPd4tdj9c0lpvWQdqXtL1TlFRpD/P6UMEigfN0c9oWDg9U7Ilymgei0UXtf1gtcQbc5sSQU0S4vr9YJp2gLFIGK11Iqg4XSGdcI0QWLLkkC6cBukhVnd6BCYbLjTYy3fNs4DzNdemJlxGl8sLexFytBF6YApvSdus3nFXaMCtBGx16HzkK9ne3lobAwL2o79bP4imEGqg+ibvyNmbrwFGnQrBc1jTF9LyQX9q+louxVfHs6ZiVwIDAQABo2IwYDBeBgNVHQEEVzBVgBCxDDsLd8xkfOLKm4Q/SzjtoS8wLTErMCkGA1UEAxMiYWNjb3VudHMuYWNjZXNzY29udHJvbC53aW5kb3dzLm5ldIIQVWmXY/+9RqFA/OG9kFulHDAJBgUrDgMCHQUAA4IBAQAkJtxxm/ErgySlNk69+1odTMP8Oy6L0H17z7XGG3w4TqvTUSWaxD4hSFJ0e7mHLQLQD7oV/erACXwSZn2pMoZ89MBDjOMQA+e6QzGB7jmSzPTNmQgMLA8fWCfqPrz6zgH+1F1gNp8hJY57kfeVPBiyjuBmlTEBsBlzolY9dd/55qqfQk6cgSeCbHCy/RU/iep0+UsRMlSgPNNmqhj5gmN2AFVCN96zF694LwuPae5CeR2ZcVknexOWHYjFM0MgUSw0ubnGl0h9AJgGyhvNGcjQqu9vd1xkupFgaN+f7P3p3EVN5csBg5H94jEcQZT7EKeTiZ6bTrpDAnrr8tDCy8ng</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
-    <fed:ClaimTypesOffered>
-      <auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" Optional="true" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
-        <auth:DisplayName>UPN</auth:DisplayName>
-        <auth:Description>UPN of the user</auth:Description>
-      </auth:ClaimType>
-      <auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" Optional="true" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
-        <auth:DisplayName>Name</auth:DisplayName>
-        <auth:Description>The display name for the user</auth:Description>
-      </auth:ClaimType>
-      <auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" Optional="true" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
-        <auth:DisplayName>Given Name</auth:DisplayName>
-        <auth:Description>First name of the user</auth:Description>
-      </auth:ClaimType>
-      <auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" Optional="true" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
-        <auth:DisplayName>Surname</auth:DisplayName>
-        <auth:Description>Last name of the user</auth:Description>
-      </auth:ClaimType>
-      <auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" Optional="true" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
-        <auth:DisplayName>Authentication Instant</auth:DisplayName>
-        <auth:Description>The time (UTC) at which the user authenticated to the identity provider</auth:Description>
-      </auth:ClaimType>
-      <auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" Optional="true" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
-        <auth:DisplayName>Authentication Method</auth:DisplayName>
-        <auth:Description>The method of authentication used by the identity provider</auth:Description>
-      </auth:ClaimType>
-      <auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/tenantid" Optional="true" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
-        <auth:DisplayName>TenantId</auth:DisplayName>
-        <auth:Description>Identifier for the user's tenant</auth:Description>
-      </auth:ClaimType>
-      <auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/identityprovider" Optional="true" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
-        <auth:DisplayName>IdentityProvider</auth:DisplayName>
-        <auth:Description>Identity provider for the user.</auth:Description>
-      </auth:ClaimType>
-    </fed:ClaimTypesOffered>
-    <fed:SecurityTokenServiceEndpoint>
-      <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
-        <Address>https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/wsfed</Address>
-      </EndpointReference>
-    </fed:SecurityTokenServiceEndpoint>
-    <fed:PassiveRequestorEndpoint>
-      <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
-        <Address>https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/wsfed</Address>
-      </EndpointReference>
-    </fed:PassiveRequestorEndpoint>
-  </RoleDescriptor>
-  <RoleDescriptor xsi:type="fed:ApplicationServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/ws-sx/ws-trust/200512 http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706">
-    <KeyDescriptor use="signing">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>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</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
-    <KeyDescriptor use="signing">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>MIIDPjCCAiqgAwIBAgIQVWmXY/+9RqFA/OG9kFulHDAJBgUrDgMCHQUAMC0xKzApBgNVBAMTImFjY291bnRzLmFjY2Vzc2NvbnRyb2wud2luZG93cy5uZXQwHhcNMTIwNjA3MDcwMDAwWhcNMTQwNjA3MDcwMDAwWjAtMSswKQYDVQQDEyJhY2NvdW50cy5hY2Nlc3Njb250cm9sLndpbmRvd3MubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCz8Sn3GGXmikH2MdTeGY1D711EORX/lVXpr+ecGgqfUWF8MPB07XkYuJ54DAuYT318+2XrzMjOtqkT94VkXmxv6dFGhG8YZ8vNMPd4tdj9c0lpvWQdqXtL1TlFRpD/P6UMEigfN0c9oWDg9U7Ilymgei0UXtf1gtcQbc5sSQU0S4vr9YJp2gLFIGK11Iqg4XSGdcI0QWLLkkC6cBukhVnd6BCYbLjTYy3fNs4DzNdemJlxGl8sLexFytBF6YApvSdus3nFXaMCtBGx16HzkK9ne3lobAwL2o79bP4imEGqg+ibvyNmbrwFGnQrBc1jTF9LyQX9q+louxVfHs6ZiVwIDAQABo2IwYDBeBgNVHQEEVzBVgBCxDDsLd8xkfOLKm4Q/SzjtoS8wLTErMCkGA1UEAxMiYWNjb3VudHMuYWNjZXNzY29udHJvbC53aW5kb3dzLm5ldIIQVWmXY/+9RqFA/OG9kFulHDAJBgUrDgMCHQUAA4IBAQAkJtxxm/ErgySlNk69+1odTMP8Oy6L0H17z7XGG3w4TqvTUSWaxD4hSFJ0e7mHLQLQD7oV/erACXwSZn2pMoZ89MBDjOMQA+e6QzGB7jmSzPTNmQgMLA8fWCfqPrz6zgH+1F1gNp8hJY57kfeVPBiyjuBmlTEBsBlzolY9dd/55qqfQk6cgSeCbHCy/RU/iep0+UsRMlSgPNNmqhj5gmN2AFVCN96zF694LwuPae5CeR2ZcVknexOWHYjFM0MgUSw0ubnGl0h9AJgGyhvNGcjQqu9vd1xkupFgaN+f7P3p3EVN5csBg5H94jEcQZT7EKeTiZ6bTrpDAnrr8tDCy8ng</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
-    <fed:TargetScopes>
-      <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
-        <Address>https://sts.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/</Address>
-      </EndpointReference>
-    </fed:TargetScopes>
-    <fed:ApplicationServiceEndpoint>
-      <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
-        <Address>https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/wsfed</Address>
-      </EndpointReference>
-    </fed:ApplicationServiceEndpoint>
-    <fed:PassiveRequestorEndpoint>
-      <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
-        <Address>https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/wsfed</Address>
-      </EndpointReference>
-    </fed:PassiveRequestorEndpoint>
-  </RoleDescriptor>
-  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
-    <KeyDescriptor use="signing">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>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</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
-    <KeyDescriptor use="signing">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>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</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
-    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/saml2" />
-    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/saml2" />
-  </IDPSSODescriptor>
-</EntityDescriptor>
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/katanatest.redmond.corp.microsoft.com.cer b/test/Microsoft.AspNetCore.Authentication.Test/katanatest.redmond.corp.microsoft.com.cer
deleted file mode 100644
index bfd5220e2..000000000
Binary files a/test/Microsoft.AspNetCore.Authentication.Test/katanatest.redmond.corp.microsoft.com.cer and /dev/null differ
diff --git a/test/Microsoft.AspNetCore.Authentication.Test/selfSigned.cer b/test/Microsoft.AspNetCore.Authentication.Test/selfSigned.cer
deleted file mode 100644
index 6acc7af5a..000000000
Binary files a/test/Microsoft.AspNetCore.Authentication.Test/selfSigned.cer and /dev/null differ
diff --git a/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationAppBuilderExtensionsTests.cs b/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationAppBuilderExtensionsTests.cs
deleted file mode 100644
index c6fb596f1..000000000
--- a/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationAppBuilderExtensionsTests.cs
+++ /dev/null
@@ -1,65 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Text;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authorization.Test.TestObjects;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Builder.Internal;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Endpoints;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.Extensions.DependencyInjection;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authorization.Test
-{
-    public class AuthorizationAppBuilderExtensionsTests
-    {
-        [Fact]
-        public async Task UseAuthorization_RegistersMiddleware()
-        {
-            // Arrange
-            var authenticationService = new TestAuthenticationService();
-            var services = CreateServices(authenticationService);
-
-            var app = new ApplicationBuilder(services);
-
-            app.UseAuthorization();
-
-            var appFunc = app.Build();
-
-            var endpoint = new Endpoint(
-                null,
-                new EndpointMetadataCollection(new AuthorizeAttribute()),
-                "Test endpoint");
-
-            var httpContext = new DefaultHttpContext();
-            httpContext.RequestServices = services;
-            httpContext.SetEndpoint(endpoint);
-
-            // Act
-            await appFunc(httpContext);
-
-            // Assert
-            Assert.True(authenticationService.ChallengeCalled);
-        }
-
-        private IServiceProvider CreateServices(IAuthenticationService authenticationService)
-        {
-            var services = new ServiceCollection();
-
-            services.AddAuthorization(options => { });
-            services.AddAuthorizationPolicyEvaluator();
-            services.AddLogging();
-            services.AddSingleton(authenticationService);
-
-            var serviceProvder = services.BuildServiceProvider();
-
-            return serviceProvder;
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationEndpointConventionBuilderExtensionsTests.cs b/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationEndpointConventionBuilderExtensionsTests.cs
deleted file mode 100644
index a2ab8fa8b..000000000
--- a/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationEndpointConventionBuilderExtensionsTests.cs
+++ /dev/null
@@ -1,63 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Routing;
-using Microsoft.AspNetCore.Routing.Patterns;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authorization.Test
-{
-    public class AuthorizationEndpointConventionBuilderExtensionsTests
-    {
-        [Fact]
-        public void RequireAuthorization_IAuthorizeData()
-        {
-            // Arrange
-            var builder = new TestEndpointConventionBuilder();
-            var metadata = new AuthorizeAttribute();
-
-            // Act
-            builder.RequireAuthorization(metadata);
-
-            // Assert
-            var convention = Assert.Single(builder.Conventions);
-
-            var endpointModel = new RouteEndpointModel((context) => Task.CompletedTask, RoutePatternFactory.Parse("/"), 0);
-            convention(endpointModel);
-
-            Assert.Equal(metadata, Assert.Single(endpointModel.Metadata));
-        }
-
-        [Fact]
-        public void RequireAuthorization_PolicyName()
-        {
-            // Arrange
-            var builder = new TestEndpointConventionBuilder();
-
-            // Act
-            builder.RequireAuthorization("policy");
-
-            // Assert
-            var convention = Assert.Single(builder.Conventions);
-
-            var endpointModel = new RouteEndpointModel((context) => Task.CompletedTask, RoutePatternFactory.Parse("/"), 0);
-            convention(endpointModel);
-
-            Assert.Equal("policy", Assert.IsAssignableFrom<IAuthorizeData>(Assert.Single(endpointModel.Metadata)).Policy);
-        }
-
-        private class TestEndpointConventionBuilder : IEndpointConventionBuilder
-        {
-            public IList<Action<EndpointModel>> Conventions { get; } = new List<Action<EndpointModel>>();
-
-            public void Apply(Action<EndpointModel> convention)
-            {
-                Conventions.Add(convention);
-            }
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationMiddlewareTests.cs b/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationMiddlewareTests.cs
deleted file mode 100644
index 655a4fbf8..000000000
--- a/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationMiddlewareTests.cs
+++ /dev/null
@@ -1,459 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authorization;
-using Microsoft.AspNetCore.Authorization.Infrastructure;
-using Microsoft.AspNetCore.Authorization.Test.TestObjects;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Endpoints;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Options;
-using Moq;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authorization.Test
-{
-    public class AuthorizationMiddlewareTests
-    {
-        [Fact]
-        public async Task NoEndpoint_AnonymousUser_Allows()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(anonymous: true);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.True(next.Called);
-        }
-
-        [Fact]
-        public async Task NoEndpointWithRequired_AnonymousUser_Challenges()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetRequiredPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(anonymous: true);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.False(next.Called);
-        }
-
-        [Fact]
-        public async Task HasEndpointWithoutAuth_AnonymousUser_Allows()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(anonymous: true, endpoint: CreateEndpoint());
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.True(next.Called);
-        }
-
-        [Fact]
-        public async Task HasEndpointWithRequiredWithoutAuth_AnonymousUser_Challenges()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            policyProvider.Setup(p => p.GetRequiredPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(anonymous: true, endpoint: CreateEndpoint());
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.False(next.Called);
-        }
-
-        [Fact]
-        public async Task HasEndpointWithAuth_AnonymousUser_Challenges()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-            var authenticationService = new TestAuthenticationService();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(anonymous: true, endpoint: CreateEndpoint(new AuthorizeAttribute()), authenticationService: authenticationService);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.False(next.Called);
-            Assert.True(authenticationService.ChallengeCalled);
-        }
-
-        [Fact]
-        public async Task HasEndpointWithAuth_AnonymousUser_ChallengePerScheme()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().AddAuthenticationSchemes("schema1", "schema2").Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-            var authenticationService = new TestAuthenticationService();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(anonymous: true, endpoint: CreateEndpoint(new AuthorizeAttribute()), authenticationService: authenticationService);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.False(next.Called);
-            Assert.Equal(2, authenticationService.ChallengeCount);
-        }
-
-        [Fact]
-        public async Task OnAuthorizationAsync_WillCallPolicyProvider()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAssertion(_ => true).Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            var getPolicyCount = 0;
-            var getRequiredPolicyCount = 0;
-            policyProvider.Setup(p => p.GetPolicyAsync(It.IsAny<string>())).ReturnsAsync(policy)
-                .Callback(() => getPolicyCount++);
-            policyProvider.Setup(p => p.GetRequiredPolicyAsync()).ReturnsAsync(policy)
-                .Callback(() => getRequiredPolicyCount++);
-            var next = new TestRequestDelegate();
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(anonymous: true, endpoint: CreateEndpoint(new AuthorizeAttribute("whatever")));
-
-            // Act & Assert
-            await middleware.Invoke(context);
-            Assert.Equal(1, getPolicyCount);
-            Assert.Equal(1, getRequiredPolicyCount);
-            Assert.Equal(1, next.CalledCount);
-
-            await middleware.Invoke(context);
-            Assert.Equal(2, getPolicyCount);
-            Assert.Equal(2, getRequiredPolicyCount);
-            Assert.Equal(2, next.CalledCount);
-
-            await middleware.Invoke(context);
-            Assert.Equal(3, getPolicyCount);
-            Assert.Equal(3, getRequiredPolicyCount);
-            Assert.Equal(3, next.CalledCount);
-        }
-
-        [Fact]
-        public async Task Invoke_ValidClaimShouldNotFail()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireClaim("Permission", "CanViewPage").Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(endpoint: CreateEndpoint(new AuthorizeAttribute()));
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.True(next.Called);
-        }
-
-        [Fact]
-        public async Task HasEndpointWithAuthAndAllowAnonymous_AnonymousUser_Allows()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-            var authenticationService = new TestAuthenticationService();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(anonymous: true, endpoint: CreateEndpoint(new AuthorizeAttribute(), new AllowAnonymousAttribute()), authenticationService: authenticationService);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.True(next.Called);
-            Assert.False(authenticationService.ChallengeCalled);
-        }
-
-        [Fact]
-        public async Task HasEndpointWithAuth_AuthenticatedUser_Allows()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-            var authenticationService = new TestAuthenticationService();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(endpoint: CreateEndpoint(new AuthorizeAttribute()), authenticationService: authenticationService);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.True(next.Called);
-            Assert.False(authenticationService.ChallengeCalled);
-        }
-
-        [Fact]
-        public async Task Invoke_AuthSchemesFailShouldSetEmptyPrincipalOnContext()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder("Fails").RequireAuthenticatedUser().Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-            var authenticationService = new TestAuthenticationService();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(endpoint: CreateEndpoint(new AuthorizeAttribute()), authenticationService: authenticationService);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.False(next.Called);
-            Assert.NotNull(context.User?.Identity);
-            Assert.True(authenticationService.AuthenticateCalled);
-            Assert.True(authenticationService.ChallengeCalled);
-        }
-
-        [Fact]
-        public async Task Invoke_SingleValidClaimShouldSucceed()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireClaim("Permission", "CanViewComment", "CanViewPage").Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(endpoint: CreateEndpoint(new AuthorizeAttribute()));
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.True(next.Called);
-        }
-
-        [Fact]
-        public async Task AuthZResourceShouldBeEndpoint()
-        {
-            // Arrange
-            object resource = null;
-            var policy = new AuthorizationPolicyBuilder().RequireAssertion(c =>
-            {
-                resource = c.Resource;
-                return true;
-            }).Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var endpoint = CreateEndpoint(new AuthorizeAttribute());
-            var context = GetHttpContext(endpoint: endpoint);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.Equal(endpoint, resource);
-        }
-
-        [Fact]
-        public async Task Invoke_RequireUnknownRoleShouldForbid()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireRole("Wut").Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-            var authenticationService = new TestAuthenticationService();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(endpoint: CreateEndpoint(new AuthorizeAttribute()), authenticationService: authenticationService);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.False(next.Called);
-            Assert.False(authenticationService.ChallengeCalled);
-            Assert.True(authenticationService.ForbidCalled);
-        }
-
-        [Fact]
-        public async Task Invoke_RequireUnknownRole_ForbidPerScheme()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireRole("Wut").AddAuthenticationSchemes("Basic", "Bearer").Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-            var authenticationService = new TestAuthenticationService();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(endpoint: CreateEndpoint(new AuthorizeAttribute()), authenticationService: authenticationService);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.False(next.Called);
-            Assert.Equal(2, authenticationService.ForbidCount);
-        }
-
-        [Fact]
-        public async Task Invoke_InvalidClaimShouldForbid()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder()
-                .RequireClaim("Permission", "CanViewComment")
-                .Build();
-            var policyProvider = new Mock<IAuthorizationPolicyProvider>();
-            policyProvider.Setup(p => p.GetDefaultPolicyAsync()).ReturnsAsync(policy);
-            var next = new TestRequestDelegate();
-            var authenticationService = new TestAuthenticationService();
-
-            var middleware = CreateMiddleware(next.Invoke, policyProvider.Object);
-            var context = GetHttpContext(endpoint: CreateEndpoint(new AuthorizeAttribute()), authenticationService: authenticationService);
-
-            // Act
-            await middleware.Invoke(context);
-
-            // Assert
-            Assert.False(next.Called);
-            Assert.False(authenticationService.ChallengeCalled);
-            Assert.True(authenticationService.ForbidCalled);
-        }
-
-        private AuthorizationMiddleware CreateMiddleware(RequestDelegate requestDelegate = null, IAuthorizationPolicyProvider policyProvider = null)
-        {
-            requestDelegate = requestDelegate ?? ((context) => Task.CompletedTask);
-
-            return new AuthorizationMiddleware(requestDelegate, policyProvider);
-        }
-
-        private Endpoint CreateEndpoint(params object[] metadata)
-        {
-            return new Endpoint(context => Task.CompletedTask, new EndpointMetadataCollection(metadata), "Test endpoint");
-        }
-
-        private HttpContext GetHttpContext(
-            bool anonymous = false,
-            Action<IServiceCollection> registerServices = null,
-            Endpoint endpoint = null,
-            IAuthenticationService authenticationService = null)
-        {
-            var basicPrincipal = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("Permission", "CanViewPage"),
-                        new Claim(ClaimTypes.Role, "Administrator"),
-                        new Claim(ClaimTypes.Role, "User"),
-                        new Claim(ClaimTypes.NameIdentifier, "John")},
-                        "Basic"));
-
-            var validUser = basicPrincipal;
-
-            var bearerIdentity = new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("Permission", "CupBearer"),
-                        new Claim(ClaimTypes.Role, "Token"),
-                        new Claim(ClaimTypes.NameIdentifier, "John Bear")},
-                        "Bearer");
-
-            validUser.AddIdentity(bearerIdentity);
-
-            // ServiceProvider
-            var serviceCollection = new ServiceCollection();
-
-            authenticationService = authenticationService ?? Mock.Of<IAuthenticationService>();
-
-            serviceCollection.AddSingleton(authenticationService);
-            serviceCollection.AddOptions();
-            serviceCollection.AddLogging();
-            serviceCollection.AddAuthorization();
-            serviceCollection.AddAuthorizationPolicyEvaluator();
-            registerServices?.Invoke(serviceCollection);
-
-            var serviceProvider = serviceCollection.BuildServiceProvider();
-
-            //// HttpContext
-            var httpContext = new DefaultHttpContext();
-            if (endpoint != null)
-            {
-                httpContext.SetEndpoint(endpoint);
-            }
-            httpContext.RequestServices = serviceProvider;
-            if (!anonymous)
-            {
-                httpContext.User = validUser;
-            }
-
-            return httpContext;
-        }
-
-        private class TestRequestDelegate
-        {
-            private readonly int _statusCode;
-
-            public bool Called => CalledCount > 0;
-            public int CalledCount { get; private set; }
-
-            public TestRequestDelegate(int statusCode = 200)
-            {
-                _statusCode = statusCode;
-            }
-
-            public Task Invoke(HttpContext context)
-            {
-                CalledCount++;
-                context.Response.StatusCode = _statusCode;
-                return Task.CompletedTask;
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationPolicyFacts.cs b/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationPolicyFacts.cs
deleted file mode 100644
index 143be1b9b..000000000
--- a/test/Microsoft.AspNetCore.Authorization.Test/AuthorizationPolicyFacts.cs
+++ /dev/null
@@ -1,159 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authorization;
-using Microsoft.AspNetCore.Authorization.Infrastructure;
-using Microsoft.Extensions.Options;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authorization.Test
-{
-    public class AuthorizationPolicyFacts
-    {
-        [Fact]
-        public void RequireRoleThrowsIfEmpty()
-        {
-            Assert.Throws<InvalidOperationException>(() => new AuthorizationPolicyBuilder().RequireRole());
-        }
-
-        [Fact]
-        public async Task CanCombineAuthorizeAttributes()
-        {
-            // Arrange
-            var attributes = new AuthorizeAttribute[] {
-                new AuthorizeAttribute(),
-                new AuthorizeAttribute("1") { AuthenticationSchemes = "dupe" },
-                new AuthorizeAttribute("2") { AuthenticationSchemes = "dupe" },
-                new AuthorizeAttribute { Roles = "r1,r2", AuthenticationSchemes = "roles" },
-            };
-            var options = new AuthorizationOptions();
-            options.AddPolicy("1", policy => policy.RequireClaim("1"));
-            options.AddPolicy("2", policy => policy.RequireClaim("2"));
-
-            var provider = new DefaultAuthorizationPolicyProvider(Options.Create(options));
-
-            // Act
-            var combined = await AuthorizationPolicy.CombineAsync(provider, attributes);
-
-            // Assert
-            Assert.Equal(2, combined.AuthenticationSchemes.Count());
-            Assert.Contains("dupe", combined.AuthenticationSchemes);
-            Assert.Contains("roles", combined.AuthenticationSchemes);
-            Assert.Equal(4, combined.Requirements.Count());
-            Assert.Contains(combined.Requirements, r => r is DenyAnonymousAuthorizationRequirement);
-            Assert.Equal(2, combined.Requirements.OfType<ClaimsAuthorizationRequirement>().Count());
-            Assert.Single(combined.Requirements.OfType<RolesAuthorizationRequirement>());
-        }
-
-        [Fact]
-        public async Task CanReplaceDefaultPolicy()
-        {
-            // Arrange
-            var attributes = new AuthorizeAttribute[] {
-                new AuthorizeAttribute(),
-                new AuthorizeAttribute("2") { AuthenticationSchemes = "dupe" }
-            };
-            var options = new AuthorizationOptions();
-            options.DefaultPolicy = new AuthorizationPolicyBuilder("default").RequireClaim("default").Build();
-            options.AddPolicy("2", policy => policy.RequireClaim("2"));
-
-            var provider = new DefaultAuthorizationPolicyProvider(Options.Create(options));
-
-            // Act
-            var combined = await AuthorizationPolicy.CombineAsync(provider, attributes);
-
-            // Assert
-            Assert.Equal(2, combined.AuthenticationSchemes.Count());
-            Assert.Contains("dupe", combined.AuthenticationSchemes);
-            Assert.Contains("default", combined.AuthenticationSchemes);
-            Assert.Equal(2, combined.Requirements.Count());
-            Assert.DoesNotContain(combined.Requirements, r => r is DenyAnonymousAuthorizationRequirement);
-            Assert.Equal(2, combined.Requirements.OfType<ClaimsAuthorizationRequirement>().Count());
-        }
-
-        [Fact]
-        public async Task CombineMustTrimRoles()
-        {
-            // Arrange
-            var attributes = new AuthorizeAttribute[] {
-                new AuthorizeAttribute() { Roles = "r1 , r2" }
-            };
-            var options = new AuthorizationOptions();
-            var provider = new DefaultAuthorizationPolicyProvider(Options.Create(options));
-
-            // Act
-            var combined = await AuthorizationPolicy.CombineAsync(provider, attributes);
-
-            // Assert
-            Assert.Contains(combined.Requirements, r => r is RolesAuthorizationRequirement);
-            var rolesAuthorizationRequirement = combined.Requirements.OfType<RolesAuthorizationRequirement>().First();
-            Assert.Equal(2, rolesAuthorizationRequirement.AllowedRoles.Count());
-            Assert.Contains(rolesAuthorizationRequirement.AllowedRoles, r => r.Equals("r1"));
-            Assert.Contains(rolesAuthorizationRequirement.AllowedRoles, r => r.Equals("r2"));
-        }
-
-        [Fact]
-        public async Task CombineMustTrimAuthenticationScheme()
-        {
-            // Arrange
-            var attributes = new AuthorizeAttribute[] {
-                new AuthorizeAttribute() { AuthenticationSchemes = "a1 , a2" }
-            };
-            var options = new AuthorizationOptions();
-
-            var provider = new DefaultAuthorizationPolicyProvider(Options.Create(options));
-
-            // Act
-            var combined = await AuthorizationPolicy.CombineAsync(provider, attributes);
-
-            // Assert
-            Assert.Equal(2, combined.AuthenticationSchemes.Count());
-            Assert.Contains(combined.AuthenticationSchemes, a => a.Equals("a1"));
-            Assert.Contains(combined.AuthenticationSchemes, a => a.Equals("a2"));
-        }
-        
-        [Fact]
-        public async Task CombineMustIgnoreEmptyAuthenticationScheme()
-        {
-            // Arrange
-            var attributes = new AuthorizeAttribute[] {
-                new AuthorizeAttribute() { AuthenticationSchemes = "a1 , , ,,, a2" }
-            };
-            var options = new AuthorizationOptions();
-
-            var provider = new DefaultAuthorizationPolicyProvider(Options.Create(options));
-
-            // Act
-            var combined = await AuthorizationPolicy.CombineAsync(provider, attributes);
-
-            // Assert
-            Assert.Equal(2, combined.AuthenticationSchemes.Count());
-            Assert.Contains(combined.AuthenticationSchemes, a => a.Equals("a1"));
-            Assert.Contains(combined.AuthenticationSchemes, a => a.Equals("a2"));
-        }
-        
-        [Fact]
-        public async Task CombineMustIgnoreEmptyRoles()
-        {
-            // Arrange
-            var attributes = new AuthorizeAttribute[] {
-                new AuthorizeAttribute() { Roles = "r1 , ,, , r2" }
-            };
-            var options = new AuthorizationOptions();
-            var provider = new DefaultAuthorizationPolicyProvider(Options.Create(options));
-
-            // Act
-            var combined = await AuthorizationPolicy.CombineAsync(provider, attributes);
-
-            // Assert
-            Assert.Contains(combined.Requirements, r => r is RolesAuthorizationRequirement);
-            var rolesAuthorizationRequirement = combined.Requirements.OfType<RolesAuthorizationRequirement>().First();
-            Assert.Equal(2, rolesAuthorizationRequirement.AllowedRoles.Count());
-            Assert.Contains(rolesAuthorizationRequirement.AllowedRoles, r => r.Equals("r1"));
-            Assert.Contains(rolesAuthorizationRequirement.AllowedRoles, r => r.Equals("r2"));
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authorization.Test/DefaultAuthorizationServiceTests.cs b/test/Microsoft.AspNetCore.Authorization.Test/DefaultAuthorizationServiceTests.cs
deleted file mode 100644
index 230e95c4c..000000000
--- a/test/Microsoft.AspNetCore.Authorization.Test/DefaultAuthorizationServiceTests.cs
+++ /dev/null
@@ -1,1178 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authorization.Infrastructure;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Options;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authorization.Test
-{
-    public class DefaultAuthorizationServiceTests
-    {
-        private IAuthorizationService BuildAuthorizationService(Action<IServiceCollection> setupServices = null)
-        {
-            var services = new ServiceCollection();
-            services.AddAuthorization();
-            services.AddLogging();
-            services.AddOptions();
-            setupServices?.Invoke(services);
-            return services.BuildServiceProvider().GetRequiredService<IAuthorizationService>();
-        }
-
-        [Fact]
-        public async Task AuthorizeCombineThrowsOnUnknownPolicy()
-        {
-            var provider = new DefaultAuthorizationPolicyProvider(Options.Create(new AuthorizationOptions()));
-
-            // Act
-            await Assert.ThrowsAsync<InvalidOperationException>(() => AuthorizationPolicy.CombineAsync(provider, new AuthorizeAttribute[] {
-                new AuthorizeAttribute { Policy = "Wut" }
-            }));
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldAllowIfClaimIsPresent()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage"));
-                });
-            });
-            var user = new ClaimsPrincipal(new ClaimsIdentity(new Claim[] { new Claim("Permission", "CanViewPage") }));
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldAllowIfClaimIsPresentWithSpecifiedAuthType()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => {
-                        policy.AddAuthenticationSchemes("Basic");
-                        policy.RequireClaim("Permission", "CanViewPage");
-                    });
-                });
-            });
-            var user = new ClaimsPrincipal(new ClaimsIdentity(new Claim[] { new Claim("Permission", "CanViewPage") }, "Basic"));
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldAllowIfClaimIsAmongValues()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage", "CanViewAnything"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("Permission", "CanViewPage"),
-                        new Claim("Permission", "CanViewAnything")
-                    },
-                    "Basic")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldInvokeAllHandlersByDefault()
-        {
-            // Arrange
-            var handler1 = new FailHandler();
-            var handler2 = new FailHandler();
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddSingleton<IAuthorizationHandler>(handler1);
-                services.AddSingleton<IAuthorizationHandler>(handler2);
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Custom", policy => policy.Requirements.Add(new CustomRequirement()));
-                });
-            });
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(new ClaimsPrincipal(), "Custom");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-            Assert.True(allowed.Failure.FailCalled);
-            Assert.True(handler1.Invoked);
-            Assert.True(handler2.Invoked);
-        }
-
-        [Theory]
-        [InlineData(true)]
-        [InlineData(false)]
-        public async Task Authorize_ShouldInvokeAllHandlersDependingOnSetting(bool invokeAllHandlers)
-        {
-            // Arrange
-            var handler1 = new FailHandler();
-            var handler2 = new FailHandler();
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddSingleton<IAuthorizationHandler>(handler1);
-                services.AddSingleton<IAuthorizationHandler>(handler2);
-                services.AddAuthorization(options =>
-                {
-                    options.InvokeHandlersAfterFailure = invokeAllHandlers;
-                    options.AddPolicy("Custom", policy => policy.Requirements.Add(new CustomRequirement()));
-                });
-            });
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(new ClaimsPrincipal(), "Custom");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-            Assert.True(handler1.Invoked);
-            Assert.Equal(invokeAllHandlers, handler2.Invoked);
-        }
-
-        private class FailHandler : IAuthorizationHandler
-        {
-            public bool Invoked { get; set; }
-
-            public Task HandleAsync(AuthorizationHandlerContext context)
-            {
-                Invoked = true;
-                context.Fail();
-                return Task.FromResult(0);
-            }
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldFailWhenAllRequirementsNotHandled()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage", "CanViewAnything"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("SomethingElse", "CanViewPage"),
-                    },
-                    "Basic")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-            Assert.IsType<ClaimsAuthorizationRequirement>(allowed.Failure.FailedRequirements.First());
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldNotAllowIfClaimTypeIsNotPresent()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage", "CanViewAnything"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("SomethingElse", "CanViewPage"),
-                    },
-                    "Basic")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldNotAllowIfClaimValueIsNotPresent()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("Permission", "CanViewComment"),
-                    },
-                    "Basic")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldNotAllowIfNoClaims()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[0],
-                    "Basic")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldNotAllowIfUserIsNull()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage"));
-                });
-            });
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(null, null, "Basic");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldNotAllowIfNotCorrectAuthType()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage"));
-                });
-            });
-            var user = new ClaimsPrincipal(new ClaimsIdentity());
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ShouldAllowWithNoAuthType()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireClaim("Permission", "CanViewPage"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("Permission", "CanViewPage"),
-                    },
-                    "Basic")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_ThrowsWithUnknownPolicy()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService();
-
-            // Act
-            // Assert
-            var exception = await Assert.ThrowsAsync<InvalidOperationException>(() => authorizationService.AuthorizeAsync(new ClaimsPrincipal(), "whatever", "BogusPolicy"));
-            Assert.Equal("No policy found: BogusPolicy.", exception.Message);
-        }
-
-        [Fact]
-        public async Task Authorize_CustomRolePolicy()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireRole("Administrator")
-                .RequireClaim(ClaimTypes.Role, "User");
-            var authorizationService = BuildAuthorizationService();
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim(ClaimTypes.Role, "User"),
-                        new Claim(ClaimTypes.Role, "Administrator")
-                    },
-                    "Basic")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, policy.Build());
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_HasAnyClaimOfTypePolicy()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireClaim(ClaimTypes.Role);
-            var authorizationService = BuildAuthorizationService();
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim(ClaimTypes.Role, "none"),
-                    },
-                    "Basic")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, policy.Build());
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task Authorize_PolicyCanAuthenticationSchemeWithNameClaim()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder("AuthType").RequireClaim(ClaimTypes.Name);
-            var authorizationService = BuildAuthorizationService();
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(new Claim[] { new Claim(ClaimTypes.Name, "Name") }, "AuthType")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, policy.Build());
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task RolePolicyCanRequireSingleRole()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder("AuthType").RequireRole("Admin");
-            var authorizationService = BuildAuthorizationService();
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(new Claim[] { new Claim(ClaimTypes.Role, "Admin") }, "AuthType")
-            );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, policy.Build());
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task RolePolicyCanRequireOneOfManyRoles()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder("AuthType").RequireRole("Admin", "Users");
-            var authorizationService = BuildAuthorizationService();
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(new Claim[] { new Claim(ClaimTypes.Role, "Users") }, "AuthType"));
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, policy.Build());
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task RolePolicyCanBlockWrongRole()
-        {
-            // Arrange
-            var policy = new AuthorizationPolicyBuilder().RequireClaim("Permission", "CanViewPage");
-            var authorizationService = BuildAuthorizationService();
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim(ClaimTypes.Role, "Nope"),
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, policy.Build());
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task RolePolicyCanBlockNoRole()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireRole("Admin", "Users"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public void PolicyThrowsWithNoRequirements()
-        {
-            Assert.Throws<InvalidOperationException>(() => BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => { });
-                });
-            }));
-        }
-
-        [Fact]
-        public async Task RequireUserNameFailsForWrongUserName()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Hao", policy => policy.RequireUserName("Hao"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim(ClaimTypes.Name, "Tek"),
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Hao");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CanRequireUserName()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Hao", policy => policy.RequireUserName("Hao"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim(ClaimTypes.Name, "Hao"),
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Hao");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CanRequireUserNameWithDiffClaimType()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Hao", policy => policy.RequireUserName("Hao"));
-                });
-            });
-            var identity = new ClaimsIdentity("AuthType", "Name", "Role");
-            identity.AddClaim(new Claim("Name", "Hao"));
-            var user = new ClaimsPrincipal(identity);
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Hao");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CanRequireRoleWithDiffClaimType()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Hao", policy => policy.RequireRole("Hao"));
-                });
-            });
-            var identity = new ClaimsIdentity("AuthType", "Name", "Role");
-            identity.AddClaim(new Claim("Role", "Hao"));
-            var user = new ClaimsPrincipal(identity);
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Hao");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CanApproveAnyAuthenticatedUser()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Any", policy => policy.RequireAuthenticatedUser());
-                });
-            });
-            var user = new ClaimsPrincipal(new ClaimsIdentity());
-            user.AddIdentity(new ClaimsIdentity(
-                new Claim[] {
-                    new Claim(ClaimTypes.Name, "Name"),
-                },
-                "AuthType"));
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, "Any");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CanBlockNonAuthenticatedUser()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Any", policy => policy.RequireAuthenticatedUser());
-                });
-            });
-            var user = new ClaimsPrincipal(new ClaimsIdentity());
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, "Any");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        public class CustomRequirement : IAuthorizationRequirement { }
-        public class CustomHandler : AuthorizationHandler<CustomRequirement>
-        {
-            public bool Invoked { get; set; }
-
-            protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, CustomRequirement requirement)
-            {
-                Invoked = true;
-                context.Succeed(requirement);
-                return Task.FromResult(0);
-            }
-        }
-
-        [Fact]
-        public async Task CustomReqWithNoHandlerFails()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Custom", policy => policy.Requirements.Add(new CustomRequirement()));
-                });
-            });
-            var user = new ClaimsPrincipal();
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, "Custom");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CustomReqWithHandlerSucceeds()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddTransient<IAuthorizationHandler, CustomHandler>();
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Custom", policy => policy.Requirements.Add(new CustomRequirement()));
-                });
-            });
-            var user = new ClaimsPrincipal();
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, "Custom");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        public class PassThroughRequirement : AuthorizationHandler<PassThroughRequirement>, IAuthorizationRequirement
-        {
-            public PassThroughRequirement(bool succeed)
-            {
-                Succeed = succeed;
-            }
-
-            public bool Succeed { get; set; }
-
-            protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, PassThroughRequirement requirement)
-            {
-                if (Succeed) {
-                    context.Succeed(requirement);
-                }
-                return Task.FromResult(0);
-            }
-        }
-
-        [Theory]
-        [InlineData(true)]
-        [InlineData(false)]
-        public async Task PassThroughRequirementWillSucceedWithoutCustomHandler(bool shouldSucceed)
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Passthrough", policy => policy.Requirements.Add(new PassThroughRequirement(shouldSucceed)));
-                });
-            });
-            var user = new ClaimsPrincipal();
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, "Passthrough");
-
-            // Assert
-            Assert.Equal(shouldSucceed, allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CanCombinePolicies()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    var basePolicy = new AuthorizationPolicyBuilder().RequireClaim("Base", "Value").Build();
-                    options.AddPolicy("Combined", policy => policy.Combine(basePolicy).RequireClaim("Claim", "Exists"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("Base", "Value"),
-                        new Claim("Claim", "Exists")
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, "Combined");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CombinePoliciesWillFailIfBasePolicyFails()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    var basePolicy = new AuthorizationPolicyBuilder().RequireClaim("Base", "Value").Build();
-                    options.AddPolicy("Combined", policy => policy.Combine(basePolicy).RequireClaim("Claim", "Exists"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("Claim", "Exists")
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, "Combined");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CombinedPoliciesWillFailIfExtraRequirementFails()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    var basePolicy = new AuthorizationPolicyBuilder().RequireClaim("Base", "Value").Build();
-                    options.AddPolicy("Combined", policy => policy.Combine(basePolicy).RequireClaim("Claim", "Exists"));
-                });
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("Base", "Value"),
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, null, "Combined");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        public class ExpenseReport { }
-
-        public static class Operations
-        {
-            public static OperationAuthorizationRequirement Edit = new OperationAuthorizationRequirement { Name = "Edit" };
-            public static OperationAuthorizationRequirement Create = new OperationAuthorizationRequirement { Name = "Create" };
-            public static OperationAuthorizationRequirement Delete = new OperationAuthorizationRequirement { Name = "Delete" };
-        }
-
-        public class ExpenseReportAuthorizationHandler : AuthorizationHandler<OperationAuthorizationRequirement, ExpenseReport>
-        {
-            public ExpenseReportAuthorizationHandler(IEnumerable<OperationAuthorizationRequirement> authorized)
-            {
-                _allowed = authorized;
-            }
-
-            private IEnumerable<OperationAuthorizationRequirement> _allowed;
-
-            protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement, ExpenseReport resource)
-            {
-                if (_allowed.Contains(requirement))
-                {
-                    context.Succeed(requirement);
-                }
-                return Task.FromResult(0);
-            }
-        }
-
-        public class SuperUserHandler : AuthorizationHandler<OperationAuthorizationRequirement>
-        {
-            protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement)
-            {
-                if (context.User.HasClaim("SuperUser", "yes"))
-                {
-                    context.Succeed(requirement);
-                }
-                return Task.FromResult(0);
-            }
-        }
-
-        [Fact]
-        public async Task CanAuthorizeAllSuperuserOperations()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddSingleton<IAuthorizationHandler>(new ExpenseReportAuthorizationHandler(new OperationAuthorizationRequirement[] { Operations.Edit }));
-                services.AddTransient<IAuthorizationHandler, SuperUserHandler>();
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("SuperUser", "yes"),
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            // Assert
-            Assert.True((await authorizationService.AuthorizeAsync(user, null, Operations.Edit)).Succeeded);
-            Assert.True((await authorizationService.AuthorizeAsync(user, null, Operations.Delete)).Succeeded);
-            Assert.True((await authorizationService.AuthorizeAsync(user, null, Operations.Create)).Succeeded);
-        }
-
-        public class NotCalledHandler : AuthorizationHandler<OperationAuthorizationRequirement, string>
-        {
-            protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement, string resource)
-            {
-                throw new NotImplementedException();
-            }
-        }
-
-        public class EvenHandler : AuthorizationHandler<OperationAuthorizationRequirement, int>
-        {
-            protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement, int id)
-            {
-                if (id % 2 == 0)
-                {
-                    context.Succeed(requirement);
-                }
-                return Task.FromResult(0);
-            }
-        }
-
-        [Fact]
-        public async Task CanUseValueTypeResource()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddTransient<IAuthorizationHandler, EvenHandler>();
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            // Assert
-            Assert.False((await authorizationService.AuthorizeAsync(user, 1, Operations.Edit)).Succeeded);
-            Assert.True((await authorizationService.AuthorizeAsync(user, 2, Operations.Edit)).Succeeded);
-        }
-
-
-        [Fact]
-        public async Task DoesNotCallHandlerWithWrongResourceType()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddTransient<IAuthorizationHandler, NotCalledHandler>();
-            });
-            var user = new ClaimsPrincipal(
-                new ClaimsIdentity(
-                    new Claim[] {
-                        new Claim("SuperUser", "yes")
-                    },
-                    "AuthType")
-                );
-
-            // Act
-            // Assert
-            Assert.False((await authorizationService.AuthorizeAsync(user, 1, Operations.Edit)).Succeeded);
-        }
-
-        [Fact]
-        public async Task CanAuthorizeOnlyAllowedOperations()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddSingleton<IAuthorizationHandler>(new ExpenseReportAuthorizationHandler(new OperationAuthorizationRequirement[] { Operations.Edit }));
-            });
-            var user = new ClaimsPrincipal();
-
-            // Act
-            // Assert
-            Assert.True((await authorizationService.AuthorizeAsync(user, new ExpenseReport(), Operations.Edit)).Succeeded);
-            Assert.False((await authorizationService.AuthorizeAsync(user, new ExpenseReport(), Operations.Delete)).Succeeded);
-            Assert.False((await authorizationService.AuthorizeAsync(user, new ExpenseReport(), Operations.Create)).Succeeded);
-        }
-
-        [Fact]
-        public async Task AuthorizeHandlerNotCalledWithNullResource()
-        {
-            // Arrange
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddSingleton<IAuthorizationHandler>(new ExpenseReportAuthorizationHandler(new OperationAuthorizationRequirement[] { Operations.Edit }));
-            });
-            var user = new ClaimsPrincipal();
-
-            // Act
-            // Assert
-            Assert.False((await authorizationService.AuthorizeAsync(user, null, Operations.Edit)).Succeeded);
-        }
-
-        [Fact]
-        public async Task CanAuthorizeWithAssertionRequirement()
-        {
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireAssertion(context => true));
-                });
-            });
-            var user = new ClaimsPrincipal();
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        [Fact]
-        public async Task CanAuthorizeWithAsyncAssertionRequirement()
-        {
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireAssertion(context => Task.FromResult(true)));
-                });
-            });
-            var user = new ClaimsPrincipal();
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.True(allowed.Succeeded);
-        }
-
-        public class StaticPolicyProvider : IAuthorizationPolicyProvider
-        {
-            public Task<AuthorizationPolicy> GetDefaultPolicyAsync()
-            {
-                return Task.FromResult(new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build());
-            }
-
-            public Task<AuthorizationPolicy> GetRequiredPolicyAsync()
-            {
-                return Task.FromResult<AuthorizationPolicy>(null);
-            }
-
-            public Task<AuthorizationPolicy> GetPolicyAsync(string policyName)
-            {
-                return Task.FromResult(new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build());
-            }
-        }
-
-        [Fact]
-        public async Task CanReplaceDefaultPolicyProvider()
-        {
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                // This will ignore the policy options
-                services.AddSingleton<IAuthorizationPolicyProvider, StaticPolicyProvider>();
-                services.AddAuthorization(options =>
-                {
-                    options.AddPolicy("Basic", policy => policy.RequireAssertion(context => true));
-                });
-            });
-            var user = new ClaimsPrincipal();
-
-            // Act
-            var allowed = await authorizationService.AuthorizeAsync(user, "Basic");
-
-            // Assert
-            Assert.False(allowed.Succeeded);
-        }
-
-        public class DynamicPolicyProvider : IAuthorizationPolicyProvider
-        {
-            public Task<AuthorizationPolicy> GetDefaultPolicyAsync()
-            {
-                return Task.FromResult(new AuthorizationPolicyBuilder().RequireAuthenticatedUser().Build());
-            }
-
-            public Task<AuthorizationPolicy> GetRequiredPolicyAsync()
-            {
-                return Task.FromResult<AuthorizationPolicy>(null);
-            }
-
-            public Task<AuthorizationPolicy> GetPolicyAsync(string policyName)
-            {
-                return Task.FromResult(new AuthorizationPolicyBuilder().RequireClaim(policyName).Build());
-            }
-        }
-
-        [Fact]
-        public async Task CanUseDynamicPolicyProvider()
-        {
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                // This will ignore the policy options
-                services.AddSingleton<IAuthorizationPolicyProvider, DynamicPolicyProvider>();
-                services.AddAuthorization(options => { });
-            });
-            var id = new ClaimsIdentity();
-            id.AddClaim(new Claim("1", "1"));
-            id.AddClaim(new Claim("2", "2"));
-            var user = new ClaimsPrincipal(id);
-
-            // Act
-            // Assert
-            Assert.False((await authorizationService.AuthorizeAsync(user, "0")).Succeeded);
-            Assert.True((await authorizationService.AuthorizeAsync(user, "1")).Succeeded);
-            Assert.True((await authorizationService.AuthorizeAsync(user, "2")).Succeeded);
-            Assert.False((await authorizationService.AuthorizeAsync(user, "3")).Succeeded);
-        }
-
-        public class SuccessEvaluator : IAuthorizationEvaluator
-        {
-            public AuthorizationResult Evaluate(AuthorizationHandlerContext context) => AuthorizationResult.Success();
-        }
-
-        [Fact]
-        public async Task CanUseCustomEvaluatorThatOverridesRequirement()
-        {
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddSingleton<IAuthorizationEvaluator, SuccessEvaluator>();
-                services.AddAuthorization(options => options.AddPolicy("Fail", p => p.RequireAssertion(c => false)));
-            });
-            var result = await authorizationService.AuthorizeAsync(null, "Fail");
-            Assert.True(result.Succeeded);
-        }
-
-
-        public class BadContextMaker : IAuthorizationHandlerContextFactory
-        {
-            public AuthorizationHandlerContext CreateContext(IEnumerable<IAuthorizationRequirement> requirements, ClaimsPrincipal user, object resource)
-            {
-                return new BadContext();
-            }
-        }
-
-        public class BadContext : AuthorizationHandlerContext
-        {
-            public BadContext() : base(new List<IAuthorizationRequirement>(), null, null) { }
-
-            public override bool HasFailed
-            {
-                get
-                {
-                    return true;
-                }
-            }
-
-            public override bool HasSucceeded
-            {
-                get
-                {
-                    return false;
-                }
-            }
-        }
-
-        [Fact]
-        public async Task CanUseCustomContextThatAlwaysFails()
-        {
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddSingleton<IAuthorizationHandlerContextFactory, BadContextMaker>();
-                services.AddAuthorization(options => options.AddPolicy("Success", p => p.RequireAssertion(c => true)));
-            });
-            Assert.False((await authorizationService.AuthorizeAsync(null, "Success")).Succeeded);
-        }
-
-        public class SadHandlerProvider : IAuthorizationHandlerProvider
-        {
-            public Task<IEnumerable<IAuthorizationHandler>> GetHandlersAsync(AuthorizationHandlerContext context)
-            {
-                return Task.FromResult<IEnumerable<IAuthorizationHandler>>(new IAuthorizationHandler[1] { new FailHandler() });
-            }
-        }
-
-        [Fact]
-        public async Task CanUseCustomHandlerProvider()
-        {
-            var authorizationService = BuildAuthorizationService(services =>
-            {
-                services.AddSingleton<IAuthorizationHandlerProvider, SadHandlerProvider>();
-                services.AddAuthorization(options => options.AddPolicy("Success", p => p.RequireAssertion(c => true)));
-            });
-            Assert.False((await authorizationService.AuthorizeAsync(null, "Success")).Succeeded);
-        }
-
-    }
-}
diff --git a/test/Microsoft.AspNetCore.Authorization.Test/Microsoft.AspNetCore.Authorization.Test.csproj b/test/Microsoft.AspNetCore.Authorization.Test/Microsoft.AspNetCore.Authorization.Test.csproj
deleted file mode 100644
index 9ff42a070..000000000
--- a/test/Microsoft.AspNetCore.Authorization.Test/Microsoft.AspNetCore.Authorization.Test.csproj
+++ /dev/null
@@ -1,21 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-    <NoWarn>$(NoWarn);NU1605</NoWarn>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authorization\Microsoft.AspNetCore.Authorization.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authorization.Policy\Microsoft.AspNetCore.Authorization.Policy.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Http" Version="$(MicrosoftAspNetCoreHttpPackageVersion)" />
-    <PackageReference Include="Microsoft.AspNetCore.Http.Abstractions" Version="$(MicrosoftAspNetCoreHttpAbstractionsPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="$(MicrosoftExtensionsDependencyInjectionPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.Logging" Version="$(MicrosoftExtensionsLoggingPackageVersion)" />
-    <PackageReference Include="Moq" Version="$(MoqPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/test/Microsoft.AspNetCore.Authorization.Test/PolicyEvaluatorTests.cs b/test/Microsoft.AspNetCore.Authorization.Test/PolicyEvaluatorTests.cs
deleted file mode 100644
index 2384e6db5..000000000
--- a/test/Microsoft.AspNetCore.Authorization.Test/PolicyEvaluatorTests.cs
+++ /dev/null
@@ -1,209 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.DependencyInjection;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Authorization.Policy.Test
-{
-    public class PolicyEvaluatorTests
-    {
-        [Fact]
-        public async Task AuthenticateFailsIfNoPrincipalReturned()
-        {
-            // Arrange
-            var evaluator = BuildEvaluator();
-            var context = new DefaultHttpContext();
-            var services = new ServiceCollection().AddSingleton<IAuthenticationService, SadAuthentication>();
-            context.RequestServices = services.BuildServiceProvider();
-            var policy = new AuthorizationPolicyBuilder().RequireAssertion(_ => true).Build();
-
-            // Act
-            var result = await evaluator.AuthenticateAsync(policy, context);
-
-            // Assert
-            Assert.False(result.Succeeded);
-        }
-
-        [Fact]
-        public async Task AuthenticateMergeSchemes()
-        {
-            // Arrange
-            var evaluator = BuildEvaluator();
-            var context = new DefaultHttpContext();
-            var services = new ServiceCollection().AddSingleton<IAuthenticationService, EchoAuthentication>();
-            context.RequestServices = services.BuildServiceProvider();
-            var policy = new AuthorizationPolicyBuilder().AddAuthenticationSchemes("A","B","C").RequireAssertion(_ => true).Build();
-
-            // Act
-            var result = await evaluator.AuthenticateAsync(policy, context);
-
-            // Assert
-            Assert.True(result.Succeeded);
-            Assert.Equal(3, result.Principal.Identities.Count());
-        }
-
-
-        [Fact]
-        public async Task AuthorizeSucceedsEvenIfAuthenticationFails()
-        {
-            // Arrange
-            var evaluator = BuildEvaluator();
-            var context = new DefaultHttpContext();
-            var policy = new AuthorizationPolicyBuilder().RequireAssertion(_ => true).Build();
-
-            // Act
-            var result = await evaluator.AuthorizeAsync(policy, AuthenticateResult.Fail("Nooo"), context, resource: null);
-
-            // Assert
-            Assert.True(result.Succeeded);
-            Assert.False(result.Challenged);
-            Assert.False(result.Forbidden);
-        }
-
-        [Fact]
-        public async Task AuthorizeSucceedsOnlyIfResourceSpecified()
-        {
-            // Arrange
-            var evaluator = BuildEvaluator();
-            var context = new DefaultHttpContext();
-            var policy = new AuthorizationPolicyBuilder().RequireAssertion(c => c.Resource != null).Build();
-            var success = AuthenticateResult.Success(new AuthenticationTicket(new ClaimsPrincipal(), "whatever"));
-
-            // Act
-            var result = await evaluator.AuthorizeAsync(policy, success, context, resource: null);
-            var result2 = await evaluator.AuthorizeAsync(policy, success, context, resource: new object());
-
-            // Assert
-            Assert.False(result.Succeeded);
-            Assert.True(result2.Succeeded);
-        }
-
-        [Fact]
-        public async Task AuthorizeChallengesIfAuthenticationFails()
-        {
-            // Arrange
-            var evaluator = BuildEvaluator();
-            var context = new DefaultHttpContext();
-            var policy = new AuthorizationPolicyBuilder().RequireAssertion(_ => false).Build();
-
-            // Act
-            var result = await evaluator.AuthorizeAsync(policy, AuthenticateResult.Fail("Nooo"), context, resource: null);
-
-            // Assert
-            Assert.False(result.Succeeded);
-            Assert.True(result.Challenged);
-            Assert.False(result.Forbidden);
-        }
-
-        [Fact]
-        public async Task AuthorizeForbidsIfAuthenticationSuceeds()
-        {
-            // Arrange
-            var evaluator = BuildEvaluator();
-            var context = new DefaultHttpContext();
-            var policy = new AuthorizationPolicyBuilder().RequireAssertion(_ => false).Build();
-
-            // Act
-            var result = await evaluator.AuthorizeAsync(policy, AuthenticateResult.Success(new AuthenticationTicket(new ClaimsPrincipal(), "scheme")), context, resource: null);
-
-            // Assert
-            Assert.False(result.Succeeded);
-            Assert.False(result.Challenged);
-            Assert.True(result.Forbidden);
-        }
-
-        private IPolicyEvaluator BuildEvaluator(Action<IServiceCollection> setupServices = null)
-        {
-            var services = new ServiceCollection()
-                .AddAuthorization()
-                .AddAuthorizationPolicyEvaluator()
-                .AddLogging()
-                .AddOptions();
-            setupServices?.Invoke(services);
-            return services.BuildServiceProvider().GetRequiredService<IPolicyEvaluator>();
-        }
-
-        public class HappyAuthorization : IAuthorizationService
-        {
-            public Task<AuthorizationResult> AuthorizeAsync(ClaimsPrincipal user, object resource, IEnumerable<IAuthorizationRequirement> requirements)
-                => Task.FromResult(AuthorizationResult.Success());
-
-            public Task<AuthorizationResult> AuthorizeAsync(ClaimsPrincipal user, object resource, string policyName)
-                => Task.FromResult(AuthorizationResult.Success());
-        }
-
-        public class SadAuthorization : IAuthorizationService
-        {
-            public Task<AuthorizationResult> AuthorizeAsync(ClaimsPrincipal user, object resource, IEnumerable<IAuthorizationRequirement> requirements)
-                => Task.FromResult(AuthorizationResult.Failed());
-
-            public Task<AuthorizationResult> AuthorizeAsync(ClaimsPrincipal user, object resource, string policyName)
-                => Task.FromResult(AuthorizationResult.Failed());
-        }
-
-        public class SadAuthentication : IAuthenticationService
-        {
-            public Task<AuthenticateResult> AuthenticateAsync(HttpContext context, string scheme)
-            {
-                return Task.FromResult(AuthenticateResult.Fail("Sad."));
-            }
-
-            public Task ChallengeAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-            {
-                throw new System.NotImplementedException();
-            }
-
-            public Task ForbidAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-            {
-                throw new System.NotImplementedException();
-            }
-
-            public Task SignInAsync(HttpContext context, string scheme, ClaimsPrincipal principal, AuthenticationProperties properties)
-            {
-                throw new System.NotImplementedException();
-            }
-
-            public Task SignOutAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-            {
-                throw new System.NotImplementedException();
-            }
-        }
-
-        public class EchoAuthentication : IAuthenticationService
-        {
-            public Task<AuthenticateResult> AuthenticateAsync(HttpContext context, string scheme)
-            {
-                return Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(new ClaimsPrincipal(new ClaimsIdentity(scheme)), scheme)));
-            }
-
-            public Task ChallengeAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-            {
-                throw new System.NotImplementedException();
-            }
-
-            public Task ForbidAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-            {
-                throw new System.NotImplementedException();
-            }
-
-            public Task SignInAsync(HttpContext context, string scheme, ClaimsPrincipal principal, AuthenticationProperties properties)
-            {
-                throw new System.NotImplementedException();
-            }
-
-            public Task SignOutAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-            {
-                throw new System.NotImplementedException();
-            }
-        }
-
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.Authorization.Test/TestObjects/TestAuthenticationService.cs b/test/Microsoft.AspNetCore.Authorization.Test/TestObjects/TestAuthenticationService.cs
deleted file mode 100644
index 0c17693d1..000000000
--- a/test/Microsoft.AspNetCore.Authorization.Test/TestObjects/TestAuthenticationService.cs
+++ /dev/null
@@ -1,58 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Linq;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Http;
-
-namespace Microsoft.AspNetCore.Authorization.Test.TestObjects
-{
-    public class TestAuthenticationService : IAuthenticationService
-    {
-        public bool ChallengeCalled => ChallengeCount > 0;
-        public bool ForbidCalled => ForbidCount > 0;
-        public bool AuthenticateCalled => AuthenticateCount > 0;
-
-        public int ChallengeCount { get; private set; }
-        public int ForbidCount { get; private set; }
-        public int AuthenticateCount { get; private set; }
-
-        public Task<AuthenticateResult> AuthenticateAsync(HttpContext context, string scheme)
-        {
-            AuthenticateCount++;
-
-            var identity = context.User.Identities.SingleOrDefault(i => i.AuthenticationType == scheme);
-            if (identity != null)
-            {
-                return Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(new ClaimsPrincipal(identity), scheme)));
-            }
-
-            return Task.FromResult(AuthenticateResult.Fail("Denied"));
-        }
-
-        public Task ChallengeAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-        {
-            ChallengeCount++;
-            return Task.CompletedTask;
-        }
-
-        public Task ForbidAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-        {
-            ForbidCount++;
-            return Task.CompletedTask;
-        }
-
-        public Task SignInAsync(HttpContext context, string scheme, ClaimsPrincipal principal, AuthenticationProperties properties)
-        {
-            throw new NotImplementedException();
-        }
-
-        public Task SignOutAsync(HttpContext context, string scheme, AuthenticationProperties properties)
-        {
-            throw new NotImplementedException();
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test/CookieChunkingTests.cs b/test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test/CookieChunkingTests.cs
deleted file mode 100644
index e645745b3..000000000
--- a/test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test/CookieChunkingTests.cs
+++ /dev/null
@@ -1,131 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using Microsoft.AspNetCore.Http;
-using Xunit;
-
-namespace Microsoft.AspNetCore.Internal
-{
-    public class CookieChunkingTests
-    {
-        [Fact]
-        public void AppendLargeCookie_Appended()
-        {
-            HttpContext context = new DefaultHttpContext();
-
-            string testString = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
-            new ChunkingCookieManager() { ChunkSize = null }.AppendResponseCookie(context, "TestCookie", testString, new CookieOptions());
-            var values = context.Response.Headers["Set-Cookie"];
-            Assert.Single(values);
-            Assert.Equal("TestCookie=" + testString + "; path=/; samesite=lax", values[0]);
-        }
-
-        [Fact]
-        public void AppendLargeCookieWithLimit_Chunked()
-        {
-            HttpContext context = new DefaultHttpContext();
-
-            string testString = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
-            new ChunkingCookieManager() { ChunkSize = 44 }.AppendResponseCookie(context, "TestCookie", testString, new CookieOptions());
-            var values = context.Response.Headers["Set-Cookie"];
-            Assert.Equal(9, values.Count);
-            Assert.Equal<string[]>(new[]
-            {
-                "TestCookie=chunks-8; path=/; samesite=lax",
-                "TestCookieC1=abcdefgh; path=/; samesite=lax",
-                "TestCookieC2=ijklmnop; path=/; samesite=lax",
-                "TestCookieC3=qrstuvwx; path=/; samesite=lax",
-                "TestCookieC4=yz012345; path=/; samesite=lax",
-                "TestCookieC5=6789ABCD; path=/; samesite=lax",
-                "TestCookieC6=EFGHIJKL; path=/; samesite=lax",
-                "TestCookieC7=MNOPQRST; path=/; samesite=lax",
-                "TestCookieC8=UVWXYZ; path=/; samesite=lax",
-            }, values);
-        }
-
-        [Fact]
-        public void GetLargeChunkedCookie_Reassembled()
-        {
-            HttpContext context = new DefaultHttpContext();
-            context.Request.Headers["Cookie"] = new[]
-            {
-                "TestCookie=chunks-7",
-                "TestCookieC1=abcdefghi",
-                "TestCookieC2=jklmnopqr",
-                "TestCookieC3=stuvwxyz0",
-                "TestCookieC4=123456789",
-                "TestCookieC5=ABCDEFGHI",
-                "TestCookieC6=JKLMNOPQR",
-                "TestCookieC7=STUVWXYZ"
-            };
-
-            string result = new ChunkingCookieManager().GetRequestCookie(context, "TestCookie");
-            string testString = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
-            Assert.Equal(testString, result);
-        }
-
-        [Fact]
-        public void GetLargeChunkedCookieWithMissingChunk_ThrowingEnabled_Throws()
-        {
-            HttpContext context = new DefaultHttpContext();
-            context.Request.Headers["Cookie"] = new[]
-            {
-                "TestCookie=chunks-7",
-                "TestCookieC1=abcdefghi",
-                // Missing chunk "TestCookieC2=jklmnopqr",
-                "TestCookieC3=stuvwxyz0",
-                "TestCookieC4=123456789",
-                "TestCookieC5=ABCDEFGHI",
-                "TestCookieC6=JKLMNOPQR",
-                "TestCookieC7=STUVWXYZ"
-            };
-
-            Assert.Throws<FormatException>(() => new ChunkingCookieManager() { ThrowForPartialCookies = true }
-                .GetRequestCookie(context, "TestCookie"));
-        }
-
-        [Fact]
-        public void GetLargeChunkedCookieWithMissingChunk_ThrowingDisabled_NotReassembled()
-        {
-            HttpContext context = new DefaultHttpContext();
-            context.Request.Headers["Cookie"] = new[]
-            {
-                "TestCookie=chunks-7",
-                "TestCookieC1=abcdefghi",
-                // Missing chunk "TestCookieC2=jklmnopqr",
-                "TestCookieC3=stuvwxyz0",
-                "TestCookieC4=123456789",
-                "TestCookieC5=ABCDEFGHI",
-                "TestCookieC6=JKLMNOPQR",
-                "TestCookieC7=STUVWXYZ"
-            };
-
-            string result = new ChunkingCookieManager() { ThrowForPartialCookies = false }.GetRequestCookie(context, "TestCookie");
-            string testString = "chunks-7";
-            Assert.Equal(testString, result);
-        }
-
-        [Fact]
-        public void DeleteChunkedCookieWithOptions_AllDeleted()
-        {
-            HttpContext context = new DefaultHttpContext();
-            context.Request.Headers.Append("Cookie", "TestCookie=chunks-7");
-
-            new ChunkingCookieManager().DeleteCookie(context, "TestCookie", new CookieOptions() { Domain = "foo.com" });
-            var cookies = context.Response.Headers["Set-Cookie"];
-            Assert.Equal(8, cookies.Count);
-            Assert.Equal(new[]
-            {
-                "TestCookie=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=foo.com; path=/; samesite=lax",
-                "TestCookieC1=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=foo.com; path=/; samesite=lax",
-                "TestCookieC2=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=foo.com; path=/; samesite=lax",
-                "TestCookieC3=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=foo.com; path=/; samesite=lax",
-                "TestCookieC4=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=foo.com; path=/; samesite=lax",
-                "TestCookieC5=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=foo.com; path=/; samesite=lax",
-                "TestCookieC6=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=foo.com; path=/; samesite=lax",
-                "TestCookieC7=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=foo.com; path=/; samesite=lax",
-            }, cookies);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test.csproj b/test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test.csproj
deleted file mode 100644
index 2f38abff9..000000000
--- a/test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test/Microsoft.AspNetCore.ChunkingCookieManager.Sources.Test.csproj
+++ /dev/null
@@ -1,15 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <Compile Include="..\..\shared\Microsoft.AspNetCore.ChunkingCookieManager.Sources\**\*.cs" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Http" Version="$(MicrosoftAspNetCoreHttpPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/test/Microsoft.AspNetCore.CookiePolicy.Test/CookieConsentTests.cs b/test/Microsoft.AspNetCore.CookiePolicy.Test/CookieConsentTests.cs
deleted file mode 100644
index fffb8cc88..000000000
--- a/test/Microsoft.AspNetCore.CookiePolicy.Test/CookieConsentTests.cs
+++ /dev/null
@@ -1,660 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.IO;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Net.Http.Headers;
-using Xunit;
-
-namespace Microsoft.AspNetCore.CookiePolicy.Test
-{
-    public class CookieConsentTests
-    {
-        [Fact]
-        public async Task ConsentChecksOffByDefault()
-        {
-            var httpContext = await RunTestAsync(options => { }, requestContext => { }, context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.False(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value");
-                return Task.CompletedTask;
-            });
-            Assert.Equal("Test=Value; path=/; samesite=lax", httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task ConsentEnabledForTemplateScenario()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext => { }, context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value");
-                return Task.CompletedTask;
-            });
-            Assert.Empty(httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task NonEssentialCookiesWithOptionsExcluded()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext => { }, context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value", new CookieOptions() { IsEssential = false });
-                return Task.CompletedTask;
-            });
-            Assert.Empty(httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task NonEssentialCookiesCanBeAllowedViaOnAppendCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-                options.OnAppendCookie = context =>
-                {
-                    Assert.True(context.IsConsentNeeded);
-                    Assert.False(context.HasConsent);
-                    Assert.False(context.IssueCookie);
-                    context.IssueCookie = true;
-                };
-            },
-            requestContext => { }, context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value", new CookieOptions() { IsEssential = false });
-                return Task.CompletedTask;
-            });
-            Assert.Equal("Test=Value; path=/; samesite=lax", httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task NeedsConsentDoesNotPreventEssentialCookies()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext => { }, context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value", new CookieOptions() { IsEssential = true });
-                return Task.CompletedTask;
-            });
-            Assert.Equal("Test=Value; path=/; samesite=lax", httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task EssentialCookiesCanBeExcludedByOnAppendCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-                options.OnAppendCookie = context =>
-                {
-                    Assert.True(context.IsConsentNeeded);
-                    Assert.True(context.HasConsent);
-                    Assert.True(context.IssueCookie);
-                    context.IssueCookie = false;
-                };
-            },
-            requestContext =>
-            {
-                requestContext.Request.Headers[HeaderNames.Cookie] = ".AspNet.Consent=yes";
-            },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value", new CookieOptions() { IsEssential = true });
-                return Task.CompletedTask;
-            });
-            Assert.Empty(httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task HasConsentReadsRequestCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext =>
-            {
-                requestContext.Request.Headers[HeaderNames.Cookie] = ".AspNet.Consent=yes";
-            },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value");
-                return Task.CompletedTask;
-            });
-            Assert.Equal("Test=Value; path=/; samesite=lax", httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task HasConsentIgnoresInvalidRequestCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext =>
-            {
-                requestContext.Request.Headers[HeaderNames.Cookie] = ".AspNet.Consent=IAmATeapot";
-            },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value");
-                return Task.CompletedTask;
-            });
-            Assert.Empty(httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task GrantConsentSetsCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext => { },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                feature.GrantConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-
-                context.Response.Cookies.Append("Test", "Value");
-                return Task.CompletedTask;
-            });
-
-            var cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers[HeaderNames.SetCookie]);
-            Assert.Equal(2, cookies.Count);
-            var consentCookie = cookies[0];
-            Assert.Equal(".AspNet.Consent", consentCookie.Name);
-            Assert.Equal("yes", consentCookie.Value);
-            Assert.True(consentCookie.Expires.HasValue);
-            Assert.True(consentCookie.Expires.Value > DateTimeOffset.Now + TimeSpan.FromDays(364));
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Lax, consentCookie.SameSite);
-            Assert.NotNull(consentCookie.Expires);
-            var testCookie = cookies[1];
-            Assert.Equal("Test", testCookie.Name);
-            Assert.Equal("Value", testCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Lax, testCookie.SameSite);
-            Assert.Null(testCookie.Expires);
-        }
-
-        [Fact]
-        public async Task GrantConsentAppliesPolicyToConsentCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-                options.MinimumSameSitePolicy = Http.SameSiteMode.Strict;
-                options.OnAppendCookie = context =>
-                {
-                    Assert.Equal(".AspNet.Consent", context.CookieName);
-                    Assert.Equal("yes", context.CookieValue);
-                    Assert.Equal(Http.SameSiteMode.Strict, context.CookieOptions.SameSite);
-                    context.CookieName += "1";
-                    context.CookieValue += "1";
-                };
-            },
-            requestContext => { },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                feature.GrantConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-
-                return Task.CompletedTask;
-            });
-
-            var cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers[HeaderNames.SetCookie]);
-            Assert.Equal(1, cookies.Count);
-            var consentCookie = cookies[0];
-            Assert.Equal(".AspNet.Consent1", consentCookie.Name);
-            Assert.Equal("yes1", consentCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Strict, consentCookie.SameSite);
-            Assert.NotNull(consentCookie.Expires);
-        }
-
-        [Fact]
-        public async Task GrantConsentWhenAlreadyHasItDoesNotSetCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext =>
-            {
-                requestContext.Request.Headers[HeaderNames.Cookie] = ".AspNet.Consent=yes";
-            },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-
-                feature.GrantConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-
-                context.Response.Cookies.Append("Test", "Value");
-                return Task.CompletedTask;
-            });
-
-            Assert.Equal("Test=Value; path=/; samesite=lax", httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task GrantConsentAfterResponseStartsSetsHasConsentButDoesNotSetCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext => { },
-            async context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                await context.Response.WriteAsync("Started.");
-
-                feature.GrantConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-
-                Assert.Throws<InvalidOperationException>(() => context.Response.Cookies.Append("Test", "Value"));
-
-                await context.Response.WriteAsync("Granted.");
-            });
-
-            var reader = new StreamReader(httpContext.Response.Body);
-            Assert.Equal("Started.Granted.", await reader.ReadToEndAsync());
-            Assert.Empty(httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task WithdrawConsentWhenNotHasConsentNoOps()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext => { },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                feature.WithdrawConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                context.Response.Cookies.Append("Test", "Value");
-                return Task.CompletedTask;
-            });
-
-            Assert.Empty(httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task WithdrawConsentDeletesCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext =>
-            {
-                requestContext.Request.Headers[HeaderNames.Cookie] = ".AspNet.Consent=yes";
-            },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value1");
-
-                feature.WithdrawConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                context.Response.Cookies.Append("Test", "Value2");
-                return Task.CompletedTask;
-            });
-
-            var cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers[HeaderNames.SetCookie]);
-            Assert.Equal(2, cookies.Count);
-            var testCookie = cookies[0];
-            Assert.Equal("Test", testCookie.Name);
-            Assert.Equal("Value1", testCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Lax, testCookie.SameSite);
-            Assert.Null(testCookie.Expires);
-            var consentCookie = cookies[1];
-            Assert.Equal(".AspNet.Consent", consentCookie.Name);
-            Assert.Equal("", consentCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Lax, consentCookie.SameSite);
-            Assert.NotNull(consentCookie.Expires);
-        }
-
-        [Fact]
-        public async Task WithdrawConsentAppliesPolicyToDeleteCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-                options.MinimumSameSitePolicy = Http.SameSiteMode.Strict;
-                options.OnDeleteCookie = context =>
-                {
-                    Assert.Equal(".AspNet.Consent", context.CookieName);
-                    context.CookieName += "1";
-                };
-            },
-            requestContext =>
-            {
-                requestContext.Request.Headers[HeaderNames.Cookie] = ".AspNet.Consent=yes";
-            },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-
-                feature.WithdrawConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                return Task.CompletedTask;
-            });
-
-            var cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers[HeaderNames.SetCookie]);
-            Assert.Equal(1, cookies.Count);
-            var consentCookie = cookies[0];
-            Assert.Equal(".AspNet.Consent1", consentCookie.Name);
-            Assert.Equal("", consentCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Strict, consentCookie.SameSite);
-            Assert.NotNull(consentCookie.Expires);
-        }
-
-        [Fact]
-        public async Task WithdrawConsentAfterResponseHasStartedDoesNotDeleteCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext =>
-            {
-                requestContext.Request.Headers[HeaderNames.Cookie] = ".AspNet.Consent=yes";
-            },
-            async context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-                context.Response.Cookies.Append("Test", "Value1");
-
-                await context.Response.WriteAsync("Started.");
-
-                feature.WithdrawConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                // Doesn't throw the normal InvalidOperationException because the cookie is never written
-                context.Response.Cookies.Append("Test", "Value2");
-
-                await context.Response.WriteAsync("Withdrawn.");
-            });
-
-            var reader = new StreamReader(httpContext.Response.Body);
-            Assert.Equal("Started.Withdrawn.", await reader.ReadToEndAsync());
-            Assert.Equal("Test=Value1; path=/; samesite=lax", httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task DeleteCookieDoesNotRequireConsent()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext => { },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-                context.Response.Cookies.Delete("Test");
-                return Task.CompletedTask;
-            });
-
-            var cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers[HeaderNames.SetCookie]);
-            Assert.Equal(1, cookies.Count);
-            var testCookie = cookies[0];
-            Assert.Equal("Test", testCookie.Name);
-            Assert.Equal("", testCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Lax, testCookie.SameSite);
-            Assert.NotNull(testCookie.Expires);
-        }
-
-        [Fact]
-        public async Task OnDeleteCookieCanSuppressCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-                options.OnDeleteCookie = context =>
-                {
-                    Assert.True(context.IsConsentNeeded);
-                    Assert.False(context.HasConsent);
-                    Assert.True(context.IssueCookie);
-                    context.IssueCookie = false;
-                };
-            },
-            requestContext => { },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-                context.Response.Cookies.Delete("Test");
-                return Task.CompletedTask;
-            });
-
-            Assert.Empty(httpContext.Response.Headers[HeaderNames.SetCookie]);
-        }
-
-        [Fact]
-        public async Task CreateConsentCookieMatchesGrantConsentCookie()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-            },
-            requestContext => { },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                feature.GrantConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-
-                var cookie = feature.CreateConsentCookie();
-                context.Response.Headers["ManualCookie"] = cookie;
-
-                return Task.CompletedTask;
-            });
-
-            var cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers[HeaderNames.SetCookie]);
-            Assert.Equal(1, cookies.Count);
-            var consentCookie = cookies[0];
-            Assert.Equal(".AspNet.Consent", consentCookie.Name);
-            Assert.Equal("yes", consentCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Lax, consentCookie.SameSite);
-            Assert.NotNull(consentCookie.Expires);
-
-            cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers["ManualCookie"]);
-            Assert.Equal(1, cookies.Count);
-            var manualCookie = cookies[0];
-            Assert.Equal(consentCookie.Name, manualCookie.Name);
-            Assert.Equal(consentCookie.Value, manualCookie.Value);
-            Assert.Equal(consentCookie.SameSite, manualCookie.SameSite);
-            Assert.NotNull(manualCookie.Expires); // Expires may not exactly match to the second.
-        }
-
-        [Fact]
-        public async Task CreateConsentCookieAppliesPolicy()
-        {
-            var httpContext = await RunTestAsync(options =>
-            {
-                options.CheckConsentNeeded = context => true;
-                options.MinimumSameSitePolicy = Http.SameSiteMode.Strict;
-                options.OnAppendCookie = context =>
-                {
-                    Assert.Equal(".AspNet.Consent", context.CookieName);
-                    Assert.Equal("yes", context.CookieValue);
-                    Assert.Equal(Http.SameSiteMode.Strict, context.CookieOptions.SameSite);
-                    context.CookieName += "1";
-                    context.CookieValue += "1";
-                };
-            },
-            requestContext => { },
-            context =>
-            {
-                var feature = context.Features.Get<ITrackingConsentFeature>();
-                Assert.True(feature.IsConsentNeeded);
-                Assert.False(feature.HasConsent);
-                Assert.False(feature.CanTrack);
-
-                feature.GrantConsent();
-
-                Assert.True(feature.IsConsentNeeded);
-                Assert.True(feature.HasConsent);
-                Assert.True(feature.CanTrack);
-
-                var cookie = feature.CreateConsentCookie();
-                context.Response.Headers["ManualCookie"] = cookie;
-
-                return Task.CompletedTask;
-            });
-
-            var cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers[HeaderNames.SetCookie]);
-            Assert.Equal(1, cookies.Count);
-            var consentCookie = cookies[0];
-            Assert.Equal(".AspNet.Consent1", consentCookie.Name);
-            Assert.Equal("yes1", consentCookie.Value);
-            Assert.Equal(Net.Http.Headers.SameSiteMode.Strict, consentCookie.SameSite);
-            Assert.NotNull(consentCookie.Expires);
-
-            cookies = SetCookieHeaderValue.ParseList(httpContext.Response.Headers["ManualCookie"]);
-            Assert.Equal(1, cookies.Count);
-            var manualCookie = cookies[0];
-            Assert.Equal(consentCookie.Name, manualCookie.Name);
-            Assert.Equal(consentCookie.Value, manualCookie.Value);
-            Assert.Equal(consentCookie.SameSite, manualCookie.SameSite);
-            Assert.NotNull(manualCookie.Expires); // Expires may not exactly match to the second.
-        }
-
-        private Task<HttpContext> RunTestAsync(Action<CookiePolicyOptions> configureOptions, Action<HttpContext> configureRequest, RequestDelegate handleRequest)
-        {
-            var builder = new WebHostBuilder()
-                .ConfigureServices(services =>
-                {
-                    services.Configure(configureOptions);
-                })
-                .Configure(app =>
-                {
-                    app.UseCookiePolicy();
-                    app.Run(handleRequest);
-                });
-            var server = new TestServer(builder);
-            return server.SendAsync(configureRequest);
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.CookiePolicy.Test/CookiePolicyTests.cs b/test/Microsoft.AspNetCore.CookiePolicy.Test/CookiePolicyTests.cs
deleted file mode 100644
index a2592e557..000000000
--- a/test/Microsoft.AspNetCore.CookiePolicy.Test/CookiePolicyTests.cs
+++ /dev/null
@@ -1,471 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System;
-using System.Security.Claims;
-using System.Security.Principal;
-using System.Threading.Tasks;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Http.Features;
-using Microsoft.AspNetCore.TestHost;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Net.Http.Headers;
-using Xunit;
-
-namespace Microsoft.AspNetCore.CookiePolicy.Test
-{
-    public class CookiePolicyTests
-    {
-        private RequestDelegate SecureCookieAppends = context =>
-        {
-            context.Response.Cookies.Append("A", "A");
-            context.Response.Cookies.Append("B", "B", new CookieOptions { Secure = false });
-            context.Response.Cookies.Append("C", "C", new CookieOptions());
-            context.Response.Cookies.Append("D", "D", new CookieOptions { Secure = true });
-            return Task.FromResult(0);
-        };
-        private RequestDelegate HttpCookieAppends = context =>
-        {
-            context.Response.Cookies.Append("A", "A");
-            context.Response.Cookies.Append("B", "B", new CookieOptions { HttpOnly = false });
-            context.Response.Cookies.Append("C", "C", new CookieOptions());
-            context.Response.Cookies.Append("D", "D", new CookieOptions { HttpOnly = true });
-            return Task.FromResult(0);
-        };
-        private RequestDelegate SameSiteCookieAppends = context =>
-        {
-            context.Response.Cookies.Append("A", "A");
-            context.Response.Cookies.Append("B", "B", new CookieOptions { SameSite = Http.SameSiteMode.None });
-            context.Response.Cookies.Append("C", "C", new CookieOptions());
-            context.Response.Cookies.Append("D", "D", new CookieOptions { SameSite = Http.SameSiteMode.Lax });
-            context.Response.Cookies.Append("E", "E", new CookieOptions { SameSite = Http.SameSiteMode.Strict });
-            return Task.FromResult(0);
-        };
-
-        [Fact]
-        public async Task SecureAlwaysSetsSecure()
-        {
-            await RunTest("/secureAlways",
-                new CookiePolicyOptions
-                {
-                    Secure = CookieSecurePolicy.Always
-                },
-                SecureCookieAppends,
-                new RequestTest("http://example.com/secureAlways",
-                    transaction =>
-                    {
-                        Assert.NotNull(transaction.SetCookie);
-                        Assert.Equal("A=A; path=/; secure; samesite=lax", transaction.SetCookie[0]);
-                        Assert.Equal("B=B; path=/; secure; samesite=lax", transaction.SetCookie[1]);
-                        Assert.Equal("C=C; path=/; secure; samesite=lax", transaction.SetCookie[2]);
-                        Assert.Equal("D=D; path=/; secure; samesite=lax", transaction.SetCookie[3]);
-                    }));
-        }
-
-        [Fact]
-        public async Task SecureNoneLeavesSecureUnchanged()
-        {
-            await RunTest("/secureNone",
-                new CookiePolicyOptions
-                {
-                    Secure = CookieSecurePolicy.None
-                },
-                SecureCookieAppends,
-                new RequestTest("http://example.com/secureNone",
-                    transaction =>
-                    {
-                        Assert.NotNull(transaction.SetCookie);
-                        Assert.Equal("A=A; path=/; samesite=lax", transaction.SetCookie[0]);
-                        Assert.Equal("B=B; path=/; samesite=lax", transaction.SetCookie[1]);
-                        Assert.Equal("C=C; path=/; samesite=lax", transaction.SetCookie[2]);
-                        Assert.Equal("D=D; path=/; secure; samesite=lax", transaction.SetCookie[3]);
-                    }));
-        }
-
-        [Fact]
-        public async Task SecureSameUsesRequest()
-        {
-            await RunTest("/secureSame",
-                new CookiePolicyOptions
-                {
-                    Secure = CookieSecurePolicy.SameAsRequest
-                },
-                SecureCookieAppends,
-                new RequestTest("http://example.com/secureSame",
-                    transaction =>
-                    {
-                        Assert.NotNull(transaction.SetCookie);
-                        Assert.Equal("A=A; path=/; samesite=lax", transaction.SetCookie[0]);
-                        Assert.Equal("B=B; path=/; samesite=lax", transaction.SetCookie[1]);
-                        Assert.Equal("C=C; path=/; samesite=lax", transaction.SetCookie[2]);
-                        Assert.Equal("D=D; path=/; secure; samesite=lax", transaction.SetCookie[3]);
-                    }),
-                new RequestTest("https://example.com/secureSame",
-                    transaction =>
-                    {
-                        Assert.NotNull(transaction.SetCookie);
-                        Assert.Equal("A=A; path=/; secure; samesite=lax", transaction.SetCookie[0]);
-                        Assert.Equal("B=B; path=/; secure; samesite=lax", transaction.SetCookie[1]);
-                        Assert.Equal("C=C; path=/; secure; samesite=lax", transaction.SetCookie[2]);
-                        Assert.Equal("D=D; path=/; secure; samesite=lax", transaction.SetCookie[3]);
-                    }));
-        }
-
-        [Fact]
-        public async Task HttpOnlyAlwaysSetsItAlways()
-        {
-            await RunTest("/httpOnlyAlways",
-                new CookiePolicyOptions
-                {
-                    HttpOnly = HttpOnlyPolicy.Always
-                },
-                HttpCookieAppends,
-                new RequestTest("http://example.com/httpOnlyAlways",
-                transaction =>
-                {
-                    Assert.NotNull(transaction.SetCookie);
-                    Assert.Equal("A=A; path=/; samesite=lax; httponly", transaction.SetCookie[0]);
-                    Assert.Equal("B=B; path=/; samesite=lax; httponly", transaction.SetCookie[1]);
-                    Assert.Equal("C=C; path=/; samesite=lax; httponly", transaction.SetCookie[2]);
-                    Assert.Equal("D=D; path=/; samesite=lax; httponly", transaction.SetCookie[3]);
-                }));
-        }
-
-        [Fact]
-        public async Task HttpOnlyNoneLeavesItAlone()
-        {
-            await RunTest("/httpOnlyNone",
-                new CookiePolicyOptions
-                {
-                    HttpOnly = HttpOnlyPolicy.None
-                },
-                HttpCookieAppends,
-                new RequestTest("http://example.com/httpOnlyNone",
-                transaction =>
-                {
-                    Assert.NotNull(transaction.SetCookie);
-                    Assert.Equal("A=A; path=/; samesite=lax", transaction.SetCookie[0]);
-                    Assert.Equal("B=B; path=/; samesite=lax", transaction.SetCookie[1]);
-                    Assert.Equal("C=C; path=/; samesite=lax", transaction.SetCookie[2]);
-                    Assert.Equal("D=D; path=/; samesite=lax; httponly", transaction.SetCookie[3]);
-                }));
-        }
-
-        [Fact]
-        public async Task SameSiteStrictSetsItAlways()
-        {
-            await RunTest("/sameSiteStrict",
-                new CookiePolicyOptions
-                {
-                    MinimumSameSitePolicy = Http.SameSiteMode.Strict
-                },
-                SameSiteCookieAppends,
-                new RequestTest("http://example.com/sameSiteStrict",
-                transaction =>
-                {
-                    Assert.NotNull(transaction.SetCookie);
-                    Assert.Equal("A=A; path=/; samesite=strict", transaction.SetCookie[0]);
-                    Assert.Equal("B=B; path=/; samesite=strict", transaction.SetCookie[1]);
-                    Assert.Equal("C=C; path=/; samesite=strict", transaction.SetCookie[2]);
-                    Assert.Equal("D=D; path=/; samesite=strict", transaction.SetCookie[3]);
-                    Assert.Equal("E=E; path=/; samesite=strict", transaction.SetCookie[4]);
-                }));
-        }
-
-        [Fact]
-        public async Task SameSiteLaxSetsItAlways()
-        {
-            await RunTest("/sameSiteLax",
-                new CookiePolicyOptions
-                {
-                    MinimumSameSitePolicy = Http.SameSiteMode.Lax
-                },
-                SameSiteCookieAppends,
-                new RequestTest("http://example.com/sameSiteLax",
-                transaction =>
-                {
-                    Assert.NotNull(transaction.SetCookie);
-                    Assert.Equal("A=A; path=/; samesite=lax", transaction.SetCookie[0]);
-                    Assert.Equal("B=B; path=/; samesite=lax", transaction.SetCookie[1]);
-                    Assert.Equal("C=C; path=/; samesite=lax", transaction.SetCookie[2]);
-                    Assert.Equal("D=D; path=/; samesite=lax", transaction.SetCookie[3]);
-                    Assert.Equal("E=E; path=/; samesite=strict", transaction.SetCookie[4]);
-                }));
-        }
-
-        [Fact]
-        public async Task SameSiteNoneLeavesItAlone()
-        {
-            await RunTest("/sameSiteNone",
-                new CookiePolicyOptions
-                {
-                    MinimumSameSitePolicy = Http.SameSiteMode.None
-                },
-                SameSiteCookieAppends,
-                new RequestTest("http://example.com/sameSiteNone",
-                transaction =>
-                {
-                    Assert.NotNull(transaction.SetCookie);
-                    Assert.Equal("A=A; path=/", transaction.SetCookie[0]);
-                    Assert.Equal("B=B; path=/", transaction.SetCookie[1]);
-                    Assert.Equal("C=C; path=/; samesite=lax", transaction.SetCookie[2]);
-                    Assert.Equal("D=D; path=/; samesite=lax", transaction.SetCookie[3]);
-                    Assert.Equal("E=E; path=/; samesite=strict", transaction.SetCookie[4]);
-                }));
-        }
-
-        [Fact]
-        public async Task CookiePolicyCanHijackAppend()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseCookiePolicy(new CookiePolicyOptions
-                    {
-                        OnAppendCookie = ctx => ctx.CookieName = ctx.CookieValue = "Hao"
-                    });
-                    app.Run(context =>
-                    {
-                        context.Response.Cookies.Append("A", "A");
-                        context.Response.Cookies.Append("B", "B", new CookieOptions { Secure = false });
-                        context.Response.Cookies.Append("C", "C", new CookieOptions());
-                        context.Response.Cookies.Append("D", "D", new CookieOptions { Secure = true });
-                        return Task.FromResult(0);
-                    });
-                });
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/login");
-
-            Assert.NotNull(transaction.SetCookie);
-            Assert.Equal("Hao=Hao; path=/; samesite=lax", transaction.SetCookie[0]);
-            Assert.Equal("Hao=Hao; path=/; samesite=lax", transaction.SetCookie[1]);
-            Assert.Equal("Hao=Hao; path=/; samesite=lax", transaction.SetCookie[2]);
-            Assert.Equal("Hao=Hao; path=/; secure; samesite=lax", transaction.SetCookie[3]);
-        }
-
-        [Fact]
-        public async Task CookiePolicyCanHijackDelete()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-            {
-                app.UseCookiePolicy(new CookiePolicyOptions
-                {
-                    OnDeleteCookie = ctx => ctx.CookieName = "A"
-                });
-                app.Run(context =>
-                {
-                    context.Response.Cookies.Delete("A");
-                    context.Response.Cookies.Delete("B", new CookieOptions { Secure = false });
-                    context.Response.Cookies.Delete("C", new CookieOptions());
-                    context.Response.Cookies.Delete("D", new CookieOptions { Secure = true });
-                    return Task.FromResult(0);
-                });
-            });
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/login");
-
-            Assert.NotNull(transaction.SetCookie);
-            Assert.Equal(1, transaction.SetCookie.Count);
-            Assert.Equal("A=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax", transaction.SetCookie[0]);
-        }
-
-        [Fact]
-        public async Task CookiePolicyCallsCookieFeature()
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-            {
-                app.Use(next => context =>
-                {
-                    context.Features.Set<IResponseCookiesFeature>(new TestCookieFeature());
-                    return next(context);
-                });
-                app.UseCookiePolicy(new CookiePolicyOptions
-                {
-                    OnDeleteCookie = ctx => ctx.CookieName = "A"
-                });
-                app.Run(context =>
-                {
-                    Assert.Throws<NotImplementedException>(() => context.Response.Cookies.Delete("A"));
-                    Assert.Throws<NotImplementedException>(() => context.Response.Cookies.Delete("A", new CookieOptions()));
-                    Assert.Throws<NotImplementedException>(() => context.Response.Cookies.Append("A", "A"));
-                    Assert.Throws<NotImplementedException>(() => context.Response.Cookies.Append("A", "A", new CookieOptions()));
-                    return context.Response.WriteAsync("Done");
-                });
-            });
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/login");
-            Assert.Equal("Done", transaction.ResponseText);
-        }
-
-        [Fact]
-        public async Task CookiePolicyAppliesToCookieAuth()
-        {
-            var builder = new WebHostBuilder()
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication().AddCookie(o =>
-                    {
-                        o.Cookie.Name = "TestCookie";
-                        o.Cookie.HttpOnly = false;
-                        o.Cookie.SecurePolicy = CookieSecurePolicy.None;
-                    });
-                })
-                .Configure(app =>
-                {
-                    app.UseCookiePolicy(new CookiePolicyOptions
-                    {
-                        HttpOnly = HttpOnlyPolicy.Always,
-                        Secure = CookieSecurePolicy.Always,
-                    });
-                    app.UseAuthentication();
-                    app.Run(context =>
-                    {
-                        return context.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme,
-                            new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity("TestUser", "Cookies"))));
-                    });
-                });
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/login");
-
-            Assert.NotNull(transaction.SetCookie);
-            Assert.Equal(1, transaction.SetCookie.Count);
-            var cookie = SetCookieHeaderValue.Parse(transaction.SetCookie[0]);
-            Assert.Equal("TestCookie", cookie.Name);
-            Assert.True(cookie.HttpOnly);
-            Assert.True(cookie.Secure);
-            Assert.Equal("/", cookie.Path);
-        }
-
-        [Fact]
-        public async Task CookiePolicyAppliesToCookieAuthChunks()
-        {
-            var builder = new WebHostBuilder()
-                .ConfigureServices(services =>
-                {
-                    services.AddAuthentication().AddCookie(o =>
-                    {
-                        o.Cookie.Name = "TestCookie";
-                        o.Cookie.HttpOnly = false;
-                        o.Cookie.SecurePolicy = CookieSecurePolicy.None;
-                    });
-                })
-                .Configure(app =>
-                {
-                    app.UseCookiePolicy(new CookiePolicyOptions
-                    {
-                        HttpOnly = HttpOnlyPolicy.Always,
-                        Secure = CookieSecurePolicy.Always,
-                    });
-                    app.UseAuthentication();
-                    app.Run(context =>
-                    {
-                        return context.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme,
-                            new ClaimsPrincipal(new ClaimsIdentity(new GenericIdentity(new string('c', 1024 * 5), "Cookies"))));
-                    });
-                });
-            var server = new TestServer(builder);
-
-            var transaction = await server.SendAsync("http://example.com/login");
-
-            Assert.NotNull(transaction.SetCookie);
-            Assert.Equal(3, transaction.SetCookie.Count);
-
-            var cookie = SetCookieHeaderValue.Parse(transaction.SetCookie[0]);
-            Assert.Equal("TestCookie", cookie.Name);
-            Assert.Equal("chunks-2", cookie.Value);
-            Assert.True(cookie.HttpOnly);
-            Assert.True(cookie.Secure);
-            Assert.Equal("/", cookie.Path);
-
-            cookie = SetCookieHeaderValue.Parse(transaction.SetCookie[1]);
-            Assert.Equal("TestCookieC1", cookie.Name);
-            Assert.True(cookie.HttpOnly);
-            Assert.True(cookie.Secure);
-            Assert.Equal("/", cookie.Path);
-
-            cookie = SetCookieHeaderValue.Parse(transaction.SetCookie[2]);
-            Assert.Equal("TestCookieC2", cookie.Name);
-            Assert.True(cookie.HttpOnly);
-            Assert.True(cookie.Secure);
-            Assert.Equal("/", cookie.Path);
-        }
-
-        private class TestCookieFeature : IResponseCookiesFeature
-        {
-            public IResponseCookies Cookies { get; } = new BadCookies();
-
-            private class BadCookies : IResponseCookies
-            {
-                public void Append(string key, string value)
-                {
-                    throw new NotImplementedException();
-                }
-
-                public void Append(string key, string value, CookieOptions options)
-                {
-                    throw new NotImplementedException();
-                }
-
-                public void Delete(string key)
-                {
-                    throw new NotImplementedException();
-                }
-
-                public void Delete(string key, CookieOptions options)
-                {
-                    throw new NotImplementedException();
-                }
-            }
-        }
-
-        private class RequestTest
-        {
-            public RequestTest(string testUri, Action<Transaction> verify)
-            {
-                TestUri = testUri;
-                Verification = verify;
-            }
-
-            public async Task Execute(TestServer server)
-            {
-                var transaction = await server.SendAsync(TestUri);
-                Verification(transaction);
-            }
-
-            public string TestUri { get; set; }
-            public Action<Transaction> Verification { get; set; }
-        }
-
-        private async Task RunTest(
-            string path,
-            CookiePolicyOptions cookiePolicy,
-            RequestDelegate configureSetup,
-            params RequestTest[] tests)
-        {
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.Map(path, map =>
-                    {
-                        map.UseCookiePolicy(cookiePolicy);
-                        map.Run(configureSetup);
-                    });
-                });
-            var server = new TestServer(builder);
-            foreach (var test in tests)
-            {
-                await test.Execute(server);
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/test/Microsoft.AspNetCore.CookiePolicy.Test/Microsoft.AspNetCore.CookiePolicy.Test.csproj b/test/Microsoft.AspNetCore.CookiePolicy.Test/Microsoft.AspNetCore.CookiePolicy.Test.csproj
deleted file mode 100644
index 3dc3df2e2..000000000
--- a/test/Microsoft.AspNetCore.CookiePolicy.Test/Microsoft.AspNetCore.CookiePolicy.Test.csproj
+++ /dev/null
@@ -1,17 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <TargetFramework>netcoreapp3.0</TargetFramework>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.Authentication.Cookies\Microsoft.AspNetCore.Authentication.Cookies.csproj" />
-    <ProjectReference Include="..\..\src\Microsoft.AspNetCore.CookiePolicy\Microsoft.AspNetCore.CookiePolicy.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.TestHost" Version="$(MicrosoftAspNetCoreTestHostPackageVersion)" />
-    <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="$(MicrosoftExtensionsDependencyInjectionPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/test/Microsoft.AspNetCore.CookiePolicy.Test/TestExtensions.cs b/test/Microsoft.AspNetCore.CookiePolicy.Test/TestExtensions.cs
deleted file mode 100644
index 9456094d4..000000000
--- a/test/Microsoft.AspNetCore.CookiePolicy.Test/TestExtensions.cs
+++ /dev/null
@@ -1,68 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.IO;
-using System.Linq;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Text;
-using System.Threading.Tasks;
-using System.Xml;
-using System.Xml.Linq;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.TestHost;
-
-namespace Microsoft.AspNetCore.CookiePolicy
-{
-    // REVIEW: Should find a shared home for these potentially (Copied from Auth tests)
-    public static class TestExtensions
-    {
-        public const string CookieAuthenticationScheme = "External";
-
-        public static async Task<Transaction> SendAsync(this TestServer server, string uri, string cookieHeader = null)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, uri);
-            if (!string.IsNullOrEmpty(cookieHeader))
-            {
-                request.Headers.Add("Cookie", cookieHeader);
-            }
-            var transaction = new Transaction
-            {
-                Request = request,
-                Response = await server.CreateClient().SendAsync(request),
-            };
-            if (transaction.Response.Headers.Contains("Set-Cookie"))
-            {
-                transaction.SetCookie = transaction.Response.Headers.GetValues("Set-Cookie").ToList();
-            }
-            transaction.ResponseText = await transaction.Response.Content.ReadAsStringAsync();
-
-            if (transaction.Response.Content != null &&
-                transaction.Response.Content.Headers.ContentType != null &&
-                transaction.Response.Content.Headers.ContentType.MediaType == "text/xml")
-            {
-                transaction.ResponseElement = XElement.Parse(transaction.ResponseText);
-            }
-            return transaction;
-        }
-
-        public static void Describe(this HttpResponse res, ClaimsPrincipal principal)
-        {
-            res.StatusCode = 200;
-            res.ContentType = "text/xml";
-            var xml = new XElement("xml");
-            if (principal != null)
-            {
-                foreach (var identity in principal.Identities)
-                {
-                    xml.Add(identity.Claims.Select(claim => 
-                        new XElement("claim", new XAttribute("type", claim.Type), 
-                        new XAttribute("value", claim.Value), 
-                        new XAttribute("issuer", claim.Issuer))));
-                }
-            }
-            var xmlBytes = Encoding.UTF8.GetBytes(xml.ToString());
-            res.Body.Write(xmlBytes, 0, xmlBytes.Length);
-        }
-    }
-}
diff --git a/test/Microsoft.AspNetCore.CookiePolicy.Test/Transaction.cs b/test/Microsoft.AspNetCore.CookiePolicy.Test/Transaction.cs
deleted file mode 100644
index 040e0b339..000000000
--- a/test/Microsoft.AspNetCore.CookiePolicy.Test/Transaction.cs
+++ /dev/null
@@ -1,51 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-using System.Collections.Generic;
-using System.Linq;
-using System.Net.Http;
-using System.Xml.Linq;
-
-namespace Microsoft.AspNetCore.CookiePolicy
-{
-    // REVIEW: Should find a shared home for these potentially (Copied from Auth tests)
-    public class Transaction
-    {
-        public HttpRequestMessage Request { get; set; }
-        public HttpResponseMessage Response { get; set; }
-
-        public IList<string> SetCookie { get; set; }
-
-        public string ResponseText { get; set; }
-        public XElement ResponseElement { get; set; }
-
-        public string AuthenticationCookieValue
-        {
-            get
-            {
-                if (SetCookie != null && SetCookie.Count > 0)
-                {
-                    var authCookie = SetCookie.SingleOrDefault(c => c.Contains(".AspNetCore." + TestExtensions.CookieAuthenticationScheme + "="));
-                    if (authCookie != null)
-                    {
-                        return authCookie.Substring(0, authCookie.IndexOf(';'));
-                    }
-                }
-
-                return null;
-            }
-        }
-
-        public string FindClaimValue(string claimType, string issuer = null)
-        {
-            var claim = ResponseElement.Elements("claim")
-                .SingleOrDefault(elt => elt.Attribute("type").Value == claimType &&
-                    (issuer == null || elt.Attribute("issuer").Value == issuer));
-            if (claim == null)
-            {
-                return null;
-            }
-            return claim.Attribute("value").Value;
-        }
-    }
-}
diff --git a/test/Microsoft.Owin.Security.Interop.Test/CookieInteropTests.cs b/test/Microsoft.Owin.Security.Interop.Test/CookieInteropTests.cs
deleted file mode 100644
index 24bf09722..000000000
--- a/test/Microsoft.Owin.Security.Interop.Test/CookieInteropTests.cs
+++ /dev/null
@@ -1,337 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-/* See https://github.com/aspnet/AspNetCore/issues/4074.
-
-This test is was disabled as a part of changing frameworks. This test will need to be re-written using separate .NET Core and .NET Framework processes.
-
-using System.Collections.Generic;
-using System.IO;
-using System.Linq;
-using System.Net.Http;
-using System.Security.Claims;
-using System.Text;
-using System.Threading.Tasks;
-using System.Xml;
-using System.Xml.Linq;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.DataProtection;
-using Microsoft.AspNetCore.Hosting;
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Net.Http.Headers;
-using Microsoft.Owin.Security.Cookies;
-using Microsoft.Owin.Testing;
-using Owin;
-using Xunit;
-
-namespace Microsoft.Owin.Security.Interop
-{
-    public class CookiesInteropTests
-    {
-        [Fact]
-        public async Task AspNetCoreWithInteropCookieContainsIdentity()
-        {
-            var identity = new ClaimsIdentity("Cookies");
-            identity.AddClaim(new Claim(ClaimTypes.Name, "Alice"));
-
-            var dataProtection = DataProtectionProvider.Create(new DirectoryInfo("..\\..\\artifacts"));
-            var dataProtector = dataProtection.CreateProtector(
-                "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationMiddleware", // full name of the ASP.NET Core type
-                Cookies.CookieAuthenticationDefaults.AuthenticationType, "v2");
-
-            var interopServer = TestServer.Create(app =>
-            {
-                app.Properties["host.AppName"] = "Microsoft.Owin.Security.Tests";
-
-                app.UseCookieAuthentication(new Cookies.CookieAuthenticationOptions
-                {
-                    TicketDataFormat = new AspNetTicketDataFormat(new DataProtectorShim(dataProtector)),
-                    CookieName = AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.CookiePrefix
-                        + AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.AuthenticationScheme,
-                });
-
-                app.Run(context =>
-                {
-                    context.Authentication.SignIn(identity);
-                    return Task.FromResult(0);
-                });
-            });
-
-            var transaction = await SendAsync(interopServer, "http://example.com");
-
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(async context => 
-                    {
-                        var result = await context.AuthenticateAsync("Cookies");
-                        await context.Response.WriteAsync(result.Ticket.Principal.Identity.Name);
-                    });
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.DataProtectionProvider = dataProtection));
-            var newServer = new AspNetCore.TestHost.TestServer(builder);
-
-            var request = new HttpRequestMessage(HttpMethod.Get, "http://example.com/login");
-            foreach (var cookie in SetCookieHeaderValue.ParseList(transaction.SetCookie))
-            {
-                request.Headers.Add("Cookie", cookie.Name + "=" + cookie.Value);
-            }
-            var response = await newServer.CreateClient().SendAsync(request);
-
-            Assert.Equal("Alice", await response.Content.ReadAsStringAsync());
-        }
-
-        [Fact]
-        public async Task AspNetCoreWithLargeInteropCookieContainsIdentity()
-        {
-            var identity = new ClaimsIdentity("Cookies");
-            identity.AddClaim(new Claim(ClaimTypes.Name, new string('a', 1024 * 5)));
-
-            var dataProtection = DataProtectionProvider.Create(new DirectoryInfo("..\\..\\artifacts"));
-            var dataProtector = dataProtection.CreateProtector(
-                "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationMiddleware", // full name of the ASP.NET Core type
-                Cookies.CookieAuthenticationDefaults.AuthenticationType, "v2");
-
-            var interopServer = TestServer.Create(app =>
-            {
-                app.Properties["host.AppName"] = "Microsoft.Owin.Security.Tests";
-
-                app.UseCookieAuthentication(new Cookies.CookieAuthenticationOptions
-                {
-                    TicketDataFormat = new AspNetTicketDataFormat(new DataProtectorShim(dataProtector)),
-                    CookieName = AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.CookiePrefix
-                        + AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.AuthenticationScheme,
-                    CookieManager = new ChunkingCookieManager(),
-                });
-
-                app.Run(context =>
-                {
-                    context.Authentication.SignIn(identity);
-                    return Task.FromResult(0);
-                });
-            });
-
-            var transaction = await SendAsync(interopServer, "http://example.com");
-
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(async context =>
-                    {
-                        var result = await context.AuthenticateAsync("Cookies");
-                        await context.Response.WriteAsync(result.Ticket.Principal.Identity.Name);
-                    });
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.DataProtectionProvider = dataProtection));
-            var newServer = new AspNetCore.TestHost.TestServer(builder);
-
-            var request = new HttpRequestMessage(HttpMethod.Get, "http://example.com/login");
-            foreach (var cookie in SetCookieHeaderValue.ParseList(transaction.SetCookie))
-            {
-                request.Headers.Add("Cookie", cookie.Name + "=" + cookie.Value);
-            }
-            var response = await newServer.CreateClient().SendAsync(request);
-
-            Assert.Equal(1024 * 5, (await response.Content.ReadAsStringAsync()).Length);
-        }
-
-        [Fact]
-        public async Task InteropWithNewCookieContainsIdentity()
-        {
-            var user = new ClaimsPrincipal();
-            var identity = new ClaimsIdentity("scheme");
-            identity.AddClaim(new Claim(ClaimTypes.Name, "Alice"));
-            user.AddIdentity(identity);
-
-            var dataProtection = DataProtectionProvider.Create(new DirectoryInfo("..\\..\\artifacts"));
-            var dataProtector = dataProtection.CreateProtector(
-                "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationMiddleware", // full name of the ASP.NET Core type
-                Cookies.CookieAuthenticationDefaults.AuthenticationType, "v2");
-
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(context => context.SignInAsync("Cookies", user));
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.DataProtectionProvider = dataProtection));
-            var newServer = new AspNetCore.TestHost.TestServer(builder);
-
-            var cookies = await SendAndGetCookies(newServer, "http://example.com/login");
-
-            var server = TestServer.Create(app =>
-            {
-                app.Properties["host.AppName"] = "Microsoft.Owin.Security.Tests";
-
-                app.UseCookieAuthentication(new Cookies.CookieAuthenticationOptions
-                {
-                    TicketDataFormat = new AspNetTicketDataFormat(new DataProtectorShim(dataProtector)),
-                    CookieName = AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.CookiePrefix
-                        + AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.AuthenticationScheme,
-                });
-
-                app.Run(async context =>
-                {
-                    var result = await context.Authentication.AuthenticateAsync("Cookies");
-                    Describe(context.Response, result);
-                });
-            });
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", cookies);
-
-            Assert.Equal("Alice", FindClaimValue(transaction2, ClaimTypes.Name));
-        }
-
-        [Fact]
-        public async Task InteropWithLargeNewCookieContainsIdentity()
-        {
-            var user = new ClaimsPrincipal();
-            var identity = new ClaimsIdentity("scheme");
-            identity.AddClaim(new Claim(ClaimTypes.Name, new string('a', 1024 * 5)));
-            user.AddIdentity(identity);
-
-            var dataProtection = DataProtectionProvider.Create(new DirectoryInfo("..\\..\\artifacts"));
-            var dataProtector = dataProtection.CreateProtector(
-                "Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationMiddleware", // full name of the ASP.NET Core type
-                Cookies.CookieAuthenticationDefaults.AuthenticationType, "v2");
-
-            var builder = new WebHostBuilder()
-                .Configure(app =>
-                {
-                    app.UseAuthentication();
-                    app.Run(context => context.SignInAsync("Cookies", user));
-                })
-                .ConfigureServices(services => services.AddAuthentication().AddCookie(o => o.DataProtectionProvider = dataProtection));
-            var newServer = new AspNetCore.TestHost.TestServer(builder);
-
-            var cookies = await SendAndGetCookies(newServer, "http://example.com/login");
-
-            var server = TestServer.Create(app =>
-            {
-                app.Properties["host.AppName"] = "Microsoft.Owin.Security.Tests";
-
-                app.UseCookieAuthentication(new Cookies.CookieAuthenticationOptions
-                {
-                    TicketDataFormat = new AspNetTicketDataFormat(new DataProtectorShim(dataProtector)),
-                    CookieName = AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.CookiePrefix
-                        + AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.AuthenticationScheme,
-                    CookieManager = new ChunkingCookieManager(),
-                });
-
-                app.Run(async context =>
-                {
-                    var result = await context.Authentication.AuthenticateAsync("Cookies");
-                    Describe(context.Response, result);
-                });
-            });
-
-            var transaction2 = await SendAsync(server, "http://example.com/me/Cookies", cookies);
-
-            Assert.Equal(1024 * 5, FindClaimValue(transaction2, ClaimTypes.Name).Length);
-        }
-
-        private static async Task<IList<string>> SendAndGetCookies(AspNetCore.TestHost.TestServer server, string uri)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, uri);
-            var response = await server.CreateClient().SendAsync(request);
-            if (response.Headers.Contains("Set-Cookie"))
-            {
-                IList<string> cookieHeaders = new List<string>();
-                foreach (var cookie in SetCookieHeaderValue.ParseList(response.Headers.GetValues("Set-Cookie").ToList()))
-                {
-                    cookieHeaders.Add(cookie.Name + "=" + cookie.Value);
-                }
-                return cookieHeaders;
-            }
-            return null;
-        }
-
-        private static string FindClaimValue(Transaction transaction, string claimType)
-        {
-            XElement claim = transaction.ResponseElement.Elements("claim").SingleOrDefault(elt => elt.Attribute("type").Value == claimType);
-            if (claim == null)
-            {
-                return null;
-            }
-            return claim.Attribute("value").Value;
-        }
-
-        private static void Describe(IOwinResponse res, AuthenticateResult result)
-        {
-            res.StatusCode = 200;
-            res.ContentType = "text/xml";
-            var xml = new XElement("xml");
-            if (result != null && result.Identity != null)
-            {
-                xml.Add(result.Identity.Claims.Select(claim => new XElement("claim", new XAttribute("type", claim.Type), new XAttribute("value", claim.Value))));
-            }
-            if (result != null && result.Properties != null)
-            {
-                xml.Add(result.Properties.Dictionary.Select(extra => new XElement("extra", new XAttribute("type", extra.Key), new XAttribute("value", extra.Value))));
-            }
-            using (var memory = new MemoryStream())
-            {
-                using (var writer = new XmlTextWriter(memory, Encoding.UTF8))
-                {
-                    xml.WriteTo(writer);
-                }
-                res.Body.Write(memory.ToArray(), 0, memory.ToArray().Length);
-            }
-        }
-
-        private static async Task<Transaction> SendAsync(TestServer server, string uri, IList<string> cookieHeaders = null, bool ajaxRequest = false)
-        {
-            var request = new HttpRequestMessage(HttpMethod.Get, uri);
-            if (cookieHeaders != null)
-            {
-                request.Headers.Add("Cookie", cookieHeaders);
-            }
-            if (ajaxRequest)
-            {
-                request.Headers.Add("X-Requested-With", "XMLHttpRequest");
-            }
-            var transaction = new Transaction
-            {
-                Request = request,
-                Response = await server.HttpClient.SendAsync(request),
-            };
-            if (transaction.Response.Headers.Contains("Set-Cookie"))
-            {
-                transaction.SetCookie = transaction.Response.Headers.GetValues("Set-Cookie").ToList();
-            }
-            if (transaction.SetCookie != null && transaction.SetCookie.Any())
-            {
-                transaction.CookieNameValue = transaction.SetCookie.First().Split(new[] { ';' }, 2).First();
-            }
-            transaction.ResponseText = await transaction.Response.Content.ReadAsStringAsync();
-
-            if (transaction.Response.Content != null &&
-                transaction.Response.Content.Headers.ContentType != null &&
-                transaction.Response.Content.Headers.ContentType.MediaType == "text/xml")
-            {
-                transaction.ResponseElement = XElement.Parse(transaction.ResponseText);
-            }
-            return transaction;
-        }
-
-        private class Transaction
-        {
-            public HttpRequestMessage Request { get; set; }
-            public HttpResponseMessage Response { get; set; }
-
-            public IList<string> SetCookie { get; set; }
-            public string CookieNameValue { get; set; }
-
-            public string ResponseText { get; set; }
-            public XElement ResponseElement { get; set; }
-        }
-
-    }
-}
-
-*/
diff --git a/test/Microsoft.Owin.Security.Interop.Test/Microsoft.Owin.Security.Interop.Test.csproj b/test/Microsoft.Owin.Security.Interop.Test/Microsoft.Owin.Security.Interop.Test.csproj
deleted file mode 100644
index 57b224ef6..000000000
--- a/test/Microsoft.Owin.Security.Interop.Test/Microsoft.Owin.Security.Interop.Test.csproj
+++ /dev/null
@@ -1,19 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <TargetFramework>net461</TargetFramework>
-    <!-- Temporarily disables tests for this project. They need to be refactored now that aspnetcore only supports netcoreapp3.0. -->
-    <IsTestProject>false</IsTestProject>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\src\Microsoft.Owin.Security.Interop\Microsoft.Owin.Security.Interop.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.TestHost" Version="$(MicrosoftAspNetCoreTestHostPackageVersion)" />
-    <PackageReference Include="Microsoft.Owin.Security.Cookies" Version="$(MicrosoftOwinSecurityCookiesPackageVersion)" />
-    <PackageReference Include="Microsoft.Owin.Testing" Version="$(MicrosoftOwinTestingPackageVersion)" />
-  </ItemGroup>
-
-</Project>
diff --git a/test/Microsoft.Owin.Security.Interop.Test/TicketInteropTests.cs b/test/Microsoft.Owin.Security.Interop.Test/TicketInteropTests.cs
deleted file mode 100644
index ccff1e936..000000000
--- a/test/Microsoft.Owin.Security.Interop.Test/TicketInteropTests.cs
+++ /dev/null
@@ -1,94 +0,0 @@
-// Copyright (c) .NET Foundation. All rights reserved.
-// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
-
-/*
-
-using System;
-using System.Linq;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Authentication;
-using Xunit;
-
-namespace Microsoft.Owin.Security.Interop.Test
-{
-    public class TicketInteropTests
-    {
-        [Fact]
-        public void NewSerializerCanReadInteropTicket()
-        {
-            var identity = new ClaimsIdentity("scheme");
-            identity.AddClaim(new Claim("Test", "Value"));
-
-            var expires = DateTime.Today;
-            var issued = new DateTime(1979, 11, 11);
-            var properties = new Owin.Security.AuthenticationProperties();
-            properties.IsPersistent = true;
-            properties.RedirectUri = "/redirect";
-            properties.Dictionary["key"] = "value";
-            properties.ExpiresUtc = expires;
-            properties.IssuedUtc = issued;
-
-            var interopTicket = new Owin.Security.AuthenticationTicket(identity, properties);
-            var interopSerializer = new AspNetTicketSerializer();
-
-            var bytes = interopSerializer.Serialize(interopTicket);
-
-            var newSerializer = new TicketSerializer();
-            var newTicket = newSerializer.Deserialize(bytes);
-
-            Assert.NotNull(newTicket);
-            Assert.Single(newTicket.Principal.Identities);
-            var newIdentity = newTicket.Principal.Identity as ClaimsIdentity;
-            Assert.NotNull(newIdentity);
-            Assert.Equal("scheme", newIdentity.AuthenticationType);
-            Assert.True(newIdentity.HasClaim(c => c.Type == "Test" && c.Value == "Value"));
-            Assert.NotNull(newTicket.Properties);
-            Assert.True(newTicket.Properties.IsPersistent);
-            Assert.Equal("/redirect", newTicket.Properties.RedirectUri);
-            Assert.Equal("value", newTicket.Properties.Items["key"]);
-            Assert.Equal(expires, newTicket.Properties.ExpiresUtc);
-            Assert.Equal(issued, newTicket.Properties.IssuedUtc);
-        }
-
-        [Fact]
-        public void InteropSerializerCanReadNewTicket()
-        {
-            var user = new ClaimsPrincipal();
-            var identity = new ClaimsIdentity("scheme");
-            identity.AddClaim(new Claim("Test", "Value"));
-            user.AddIdentity(identity);
-
-            var expires = DateTime.Today;
-            var issued = new DateTime(1979, 11, 11);
-            var properties = new AspNetCore.Authentication.AuthenticationProperties();
-            properties.IsPersistent = true;
-            properties.RedirectUri = "/redirect";
-            properties.Items["key"] = "value";
-            properties.ExpiresUtc = expires;
-            properties.IssuedUtc = issued;
-
-            var newTicket = new AspNetCore.Authentication.AuthenticationTicket(user, properties, "scheme");
-            var newSerializer = new TicketSerializer();
-
-            var bytes = newSerializer.Serialize(newTicket);
-
-            var interopSerializer = new AspNetTicketSerializer();
-            var interopTicket = interopSerializer.Deserialize(bytes);
-
-            Assert.NotNull(interopTicket);
-            var newIdentity = interopTicket.Identity;
-            Assert.NotNull(newIdentity);
-            Assert.Equal("scheme", newIdentity.AuthenticationType);
-            Assert.True(newIdentity.HasClaim(c => c.Type == "Test" && c.Value == "Value"));
-            Assert.NotNull(interopTicket.Properties);
-            Assert.True(interopTicket.Properties.IsPersistent);
-            Assert.Equal("/redirect", interopTicket.Properties.RedirectUri);
-            Assert.Equal("value", interopTicket.Properties.Dictionary["key"]);
-            Assert.Equal(expires, interopTicket.Properties.ExpiresUtc);
-            Assert.Equal(issued, interopTicket.Properties.IssuedUtc);
-        }
-    }
-}
-*/
-
-
diff --git a/version.props b/version.props
deleted file mode 100644
index 71a78cddd..000000000
--- a/version.props
+++ /dev/null
@@ -1,12 +0,0 @@
-<Project>
-  <PropertyGroup>
-    <VersionPrefix>3.0.0</VersionPrefix>
-    <VersionSuffix>alpha1</VersionSuffix>
-    <PackageVersion Condition="'$(IsFinalBuild)' == 'true' AND '$(VersionSuffix)' == 'rtm' ">$(VersionPrefix)</PackageVersion>
-    <PackageVersion Condition="'$(IsFinalBuild)' == 'true' AND '$(VersionSuffix)' != 'rtm' ">$(VersionPrefix)-$(VersionSuffix)-final</PackageVersion>
-    <BuildNumber Condition="'$(BuildNumber)' == ''">t000</BuildNumber>
-    <FeatureBranchVersionPrefix Condition="'$(FeatureBranchVersionPrefix)' == ''">a-</FeatureBranchVersionPrefix>
-    <VersionSuffix Condition="'$(VersionSuffix)' != '' And '$(FeatureBranchVersionSuffix)' != ''">$(FeatureBranchVersionPrefix)$(VersionSuffix)-$([System.Text.RegularExpressions.Regex]::Replace('$(FeatureBranchVersionSuffix)', '[^\w-]', '-'))</VersionSuffix>
-    <VersionSuffix Condition="'$(VersionSuffix)' != '' And '$(BuildNumber)' != ''">$(VersionSuffix)-$(BuildNumber)</VersionSuffix>
-  </PropertyGroup>
-</Project>