title: How to extend and validate session in ASP.NET Core Identity?
body: <p>We want to offer the users to manage their login sessions.
  This worked so far pretty easy with ASP.NET Core and WITHOUT the Identity Extensions.</p>
  
  <p><a href="https://docs.microsoft.com/en-us/aspnet/core/security/authentication/cookie?view=aspnetcore-3.1#react-to-back-end-changes" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/aspnet/core/security/authentication/cookie?view=aspnetcore-3.1#react-to-back-end-changes</a></p>
  
  <p>But how can we invoke this validation with ASP.NET Core Identity?</p>
  
  <p>Problem we have:</p>
  
  <ul>
  <li>How do we store login-session-based information like Browser Version, Device Type and User Position? Do we extend any type or what is the idea?</li>
  <li>How do we dynamically set the cookie expiration based on a specific user?</li>
  <li>How do we invalidate the Cookie from the backend (like the link above shows)?</li>
  <li>How do we required additional password-prompts for special functions?</li>
  </ul>
  
  <p>It feels the ASP.NET Core Identity is still not that extensible and flexible :(</p>