- Core Auth API now takes list of IAuthorizationRequirements, or policy name. - Overload that takes AuthorizationPolicy instance moved to extension method. - Remove HttpContext from API and replace with ClaimsPrincipal instead - Add Operation requirement - Add Sync overloads - Add ClaimsTransformationOptions (TBD where to use this) Fixes https://github.com/aspnet/Security/issues/132 Fixes https://github.com/aspnet/Security/issues/116 Fixes https://github.com/aspnet/Security/issues/11 Fixes https://github.com/aspnet/Security/issues/117