title: ASP.NET Core 3.1 OpenIDConnect, how to update claims without user logging out
body: <p>Using <code>ASP.NET Core 3.1</code> and <code>OpenIDConnect</code>, I am able to Authenticate, and during the process flow, I add the users claims, e.g. the users roles granting access to resources.</p>
  <p>If I alter the users &quot;Roles&quot; during runtime, I do not want the user to sign-out, but instead I want to enforce the token to be refreshed, and have the new claims/roles.</p>
  <p>Currently I am using this <code>options.Events.OnTokenValidated = async context =&gt; { /* add claims if authenticated */}</code> to add the claims initially.</p>
  <p>I have added middleware to detect if the user has a new &quot;Role&quot;, and want to force the event to fire again.</p>
  <p>What is the correct way to deal with this?</p>