What's new in ASP.NET Core authentication in .NET 11

Whenever a new version of .NET arrives, I want to know what has changed in authentication and authorization. As a consultant and trainer working with ASP.NET Core, I need to know what those changes mean for the applications I build and the workshops I teach. I also wanted to check the smaller updates, since they can include more than bug fixes. I compared: .NET 10.0.1 to 10.0.13: the changes in the .NET 10 servicing updates. .NET 11 RC2: the additional changes in the next major version. A fix in .NET 11 may already have shipped in a .NET 10 update, so I checked both release lines to see what is actually new. .NET 11 is not released yet, so everything I say about it is based on RC2. Details can still change before the final release. I focused on the ASP.NET Core authentication handlers, authorization, and Data Protection. These are the libraries I work with the most in my training workshops. Here is the short version of what I found: Cookie authentication: a fresh session key when you…