Authentication

[DeeJayTC]

Hey folks!
If you tried the library or at least read about it, I'm currently working on authorisation and authentication.
As doing everything the way I think its needed might not be sufficient for the use cases you have in mind I'd love to get some feedback on what you'd expect about how this works.

The current plan is the following:

• Extend the ApiAttribute
  Add new options "requiredReadScopes", "requiredWriteScopes"
  You'd have to have the specific scopes in your JWT. Another option would be to use claims.
  Wether authorization is enabled or not would be inferred if one of the properties is set.
  It would be similar to this example:

   [Api("/minimal",
      requiredReadScopes: new string[] { "minimal.read" },
      requiredWriteScopes: new string[] { "minimal.write"}]
   public class MinimalSample : IObjectBase<int>
   {
      public int Id { get; set; }
      public string Name { get; set; }
      public int Value { get; set; }
   }

• Add JWT handling
  Add a generic handler for JWTs, make everything configurable to every needed detail so pretty much every JWT
  can be used and validated.

What would you be looking for here?