- Moved policy violation handler conventions to Core.
- Added default conventions for WebApi when creating an AdvancedConfiguration.
- Added generic type argument for ISecurityPolicyViolationHandler to ViolationConfiguration so that it can be reused for WebApi as well.
- Added additional gerneric type argument for ISecurityPolicyViolationHandler to ViolationHandlerConfiguration so that it can be reused for WebApi.
- Changed it so that the type of ISecurityPolicyViolationHandler for ViolationConfiguration is defined in AdvancedConfiguration.
- Moved ViolationConfiguration and ViolationHandlerConfiguration to Core.
- Moved ApplyConfiguration for ViolationConfiguration to SecurityRuntimeBase.
- Made fields for profiles, policy containers and conventions private in SecurityRuntimeBase.
- Added support for configuring violations in the WebApi implementation.
- WebApiConfiguration to the Configuration namespace.
- Removed the empty Conventions directory from the Mvc project.
- Added a WebApiSecurityContext to the WebApi project.
- Moved the WebApiPolicyViolationHandlerSelector to the Policy.ViolationHandlers namespace to align it with the Mvc project.
- Moved LifecycleExtensions, WebApiRegistry and WebApiLifecycleResolver into a ServiceLocation namespace to align it more with the Mvc project.