问ASP.NET Core 3.1 OpenIDConnect，如何在不注销用户的情况下更新申请

EN

// middleware
public async Task Invoke(HttpContext context) {
    
    if (userRolesHaveChanged) {

        context.ChallengeAsync(OpenIdConnectDefaults.AuthenticationScheme,
                   new AuthenticationProperties { RedirectUri = redirectUrl });
        return;
    }

    // the normal flow
    await next(context);
}

// startup
services.Configure<OpenIdConnectOptions> (OpenIdConnectDefaults.AuthenticationScheme, options =>

                options.UseTokenLifetime = false; // Expire time
                options.SignInScheme = "hack";

                // SNIPPED CODE 


.AddCookie("hack", "hack", options =>
                {
                    const int minute = 60;
                    const int hour = minute * 60;
                    const int day = hour * 24;
                    options.ExpireTimeSpan = TimeSpan.FromSeconds(day/2.0);
                })

// middleware
public async Task Invoke(HttpContext context) {
        
        if (userRolesHaveChanged) {    

              // force expire....
              // causes the next page load to indirectly call ChallengeAsync
              context.Response.Cookies.Delete(".AspNetCore.hack");

              // also possibly set some other controlling variable,
              // and deal with it, within the Ajax call
              // e.g.
              context.Response.Cookies.Append("autoSignIn", redirectUrl, 
                       new CookieOptions { HttpOnly = false });
        }