diff --git a/src/admin/Bootstrap.Admin/Bootstrap.Admin.csproj b/src/admin/Bootstrap.Admin/Bootstrap.Admin.csproj
index 795b8a09..99bdbfa7 100644
--- a/src/admin/Bootstrap.Admin/Bootstrap.Admin.csproj
+++ b/src/admin/Bootstrap.Admin/Bootstrap.Admin.csproj
@@ -12,7 +12,7 @@
 
   <ItemGroup>
     <PackageReference Include="Bootstrap.Security.DataAccess" Version="2.2.21" />
-    <PackageReference Include="Bootstrap.Security.Mvc" Version="3.0.1-beta5" />
+    <PackageReference Include="Bootstrap.Security.Mvc" Version="3.0.1-beta6" />
     <PackageReference Include="Longbow.Configuration" Version="2.2.7" />
     <PackageReference Include="Longbow.Logging" Version="3.0.0" />
     <PackageReference Include="Longbow.Tasks" Version="2.2.24" />
diff --git a/src/admin/Bootstrap.Admin/Controllers/Api/DictsController.cs b/src/admin/Bootstrap.Admin/Controllers/Api/DictsController.cs
index 72c5ff0e..47b89c83 100644
--- a/src/admin/Bootstrap.Admin/Controllers/Api/DictsController.cs
+++ b/src/admin/Bootstrap.Admin/Controllers/Api/DictsController.cs
@@ -1,4 +1,4 @@
-using Bootstrap.Admin.Query;
+using Bootstrap.Admin.Query;
 using Bootstrap.DataAccess;
 using Bootstrap.Security;
 using Longbow.Web.Mvc;
@@ -47,4 +47,4 @@ namespace Bootstrap.Admin.Controllers.Api
             return DictHelper.Delete(value);
         }
     }
-}
\ No newline at end of file
+}
diff --git a/src/admin/Bootstrap.Admin/Controllers/Api/LoginController.cs b/src/admin/Bootstrap.Admin/Controllers/Api/LoginController.cs
index 07148ca2..d86420cb 100644
--- a/src/admin/Bootstrap.Admin/Controllers/Api/LoginController.cs
+++ b/src/admin/Bootstrap.Admin/Controllers/Api/LoginController.cs
@@ -29,16 +29,15 @@ namespace Bootstrap.Admin.Controllers.Api
         /// <summary>
         /// JWT 登陆认证接口
         /// </summary>
-        /// <param name="value"></param>
+        /// <param name="user"></param>
         /// <returns></returns>
         [AllowAnonymous]
         [HttpPost]
-        public string Post([FromBody]JObject value)
+        public string Post([FromBody]User user)
         {
-            string token = null;
-            dynamic user = value;
-            string userName = user.userName;
-            string password = user.password;
+            var token = string.Empty;
+            string userName = user.UserName;
+            string password = user.Password;
             if (!string.IsNullOrEmpty(userName) && !string.IsNullOrEmpty(password) && UserHelper.Authenticate(userName, password))
             {
                 token = BootstrapAdminJwtTokenHandler.CreateToken(userName);
diff --git a/src/admin/Bootstrap.Admin/Startup.cs b/src/admin/Bootstrap.Admin/Startup.cs
index b424fcd9..a26276eb 100644
--- a/src/admin/Bootstrap.Admin/Startup.cs
+++ b/src/admin/Bootstrap.Admin/Startup.cs
@@ -106,9 +106,8 @@ namespace Bootstrap.Admin
             app.UseStaticFiles();
             app.UseAutoGenerateDatabase();
             app.UseRouting();
-            app.UseAuthentication();
+            app.UseBootstrapAdminAuthentication(RoleHelper.RetrievesByUserName, RoleHelper.RetrievesByUrl, AppHelper.RetrievesByUserName);
             app.UseAuthorization();
-            app.UseBootstrapAdminAuthorization(RoleHelper.RetrievesByUserName, RoleHelper.RetrievesByUrl, AppHelper.RetrievesByUserName);
             app.UseSwagger(Configuration["SwaggerPathBase"].TrimEnd('/'));
             app.UseBootstrapHealthChecks();
             app.UseOnlineUsers(TraceHelper.Filter, TraceHelper.Save);
diff --git a/src/admin/Bootstrap.DataAccess/Bootstrap.DataAccess.csproj b/src/admin/Bootstrap.DataAccess/Bootstrap.DataAccess.csproj
index 7702c68a..1fc309d9 100644
--- a/src/admin/Bootstrap.DataAccess/Bootstrap.DataAccess.csproj
+++ b/src/admin/Bootstrap.DataAccess/Bootstrap.DataAccess.csproj
@@ -4,13 +4,9 @@
     <TargetFrameworks>netcoreapp3.0;netstandard2.0</TargetFrameworks>
   </PropertyGroup>
 
-  <ItemGroup Condition="'$(TargetFramework)' == 'netcoreapp3.0'">
-    <FrameworkReference Include="Microsoft.AspNetCore.App" />
-  </ItemGroup>
-
   <ItemGroup>
     <PackageReference Include="Bootstrap.Security.DataAccess" Version="2.2.21" />
-    <PackageReference Include="Longbow" Version="3.0.0-beta2" />
+    <PackageReference Include="Longbow" Version="3.0.0-beta3" />
     <PackageReference Include="Longbow.Configuration" Version="2.2.7" />
     <PackageReference Include="Longbow.Data" Version="2.3.8" />
     <PackageReference Include="Longbow.GiteeAuth" Version="2.2.0" />
diff --git a/src/client/Bootstrap.Client.DataAccess/Bootstrap.Client.DataAccess.csproj b/src/client/Bootstrap.Client.DataAccess/Bootstrap.Client.DataAccess.csproj
index b9511984..3524c17d 100644
--- a/src/client/Bootstrap.Client.DataAccess/Bootstrap.Client.DataAccess.csproj
+++ b/src/client/Bootstrap.Client.DataAccess/Bootstrap.Client.DataAccess.csproj
@@ -6,6 +6,7 @@
 
   <ItemGroup>
     <PackageReference Include="Bootstrap.Security.DataAccess" Version="2.2.21" />
+    <PackageReference Include="Longbow" Version="3.0.0-beta3" />
     <PackageReference Include="Longbow.Cache" Version="2.2.15" />
     <PackageReference Include="Longbow.Configuration" Version="2.2.7" />
     <PackageReference Include="Longbow.Data" Version="2.3.8" />
diff --git a/src/client/Bootstrap.Client/Bootstrap.Client.csproj b/src/client/Bootstrap.Client/Bootstrap.Client.csproj
index a8bbd990..cde6b779 100644
--- a/src/client/Bootstrap.Client/Bootstrap.Client.csproj
+++ b/src/client/Bootstrap.Client/Bootstrap.Client.csproj
@@ -6,10 +6,9 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Bootstrap.Security.Mvc" Version="3.0.1-beta4" />
+    <PackageReference Include="Bootstrap.Security.Mvc" Version="3.0.1-beta6" />
     <PackageReference Include="Longbow.Configuration" Version="2.2.7" />
     <PackageReference Include="Microsoft.Data.Sqlite" Version="3.0.0" />
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="3.0.0" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/client/Bootstrap.Client/Startup.cs b/src/client/Bootstrap.Client/Startup.cs
index 94d41a00..16586438 100644
--- a/src/client/Bootstrap.Client/Startup.cs
+++ b/src/client/Bootstrap.Client/Startup.cs
@@ -90,9 +90,8 @@ namespace Bootstrap.Client
             app.UseCookiePolicy();
 
             app.UseRouting();
-            app.UseAuthentication();
+            app.UseBootstrapAdminAuthentication(RoleHelper.RetrievesByUserName, RoleHelper.RetrievesByUrl, AppHelper.RetrievesByUserName);
             app.UseAuthorization();
-            app.UseBootstrapAdminAuthorization(RoleHelper.RetrievesByUserName, RoleHelper.RetrievesByUrl, AppHelper.RetrievesByUserName);
             app.UseCacheManager();
             app.UseOnlineUsers(callback: TraceHelper.Save);
             app.UseEndpoints(endpoints =>
diff --git a/test/UnitTest/Bootstrap.Admin/Api/HealthCheckTest.cs b/test/UnitTest/Bootstrap.Admin/Api/HealthCheckTest.cs
index 972c93ca..92705c42 100644
--- a/test/UnitTest/Bootstrap.Admin/Api/HealthCheckTest.cs
+++ b/test/UnitTest/Bootstrap.Admin/Api/HealthCheckTest.cs
@@ -8,8 +8,8 @@ using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Diagnostics.HealthChecks;
 using Microsoft.Extensions.Hosting;
-using Newtonsoft.Json;
 using System.Net.Http;
+using System.Text.Json;
 using UnitTest;
 using Xunit;
 
@@ -85,8 +85,7 @@ namespace Bootstrap.Admin.Api
             services.AddCacheManager();
             services.AddConfigurationManager();
             services.AddDbAdapter();
-            var builder = services.AddHealthChecks();
-            builder.AddCheck<DBHealthCheck>("db");
+            services.AddHealthChecks().AddCheck<DBHealthCheck>("db");
             services.AddControllers();
         }
 
@@ -101,10 +100,10 @@ namespace Bootstrap.Admin.Api
             });
             app.UseEndpoints(builder => builder.MapHealthChecks("/Healths", new HealthCheckOptions()
             {
-                ResponseWriter = (context, report) =>
+                ResponseWriter = async (context, report) =>
                 {
                     context.Response.ContentType = "application/json";
-                    return context.Response.WriteAsync(JsonConvert.SerializeObject(new { report.Entries.Keys, Report = report }));
+                    await context.Response.WriteAsync(JsonSerializer.Serialize(new { report.Status, report.TotalDuration }));
                 },
                 ResultStatusCodes =
                 {
diff --git a/test/UnitTest/Bootstrap.Admin/HttpClientExtensions.cs b/test/UnitTest/Bootstrap.Admin/HttpClientExtensions.cs
index ff87a6bb..dec13f3e 100644
--- a/test/UnitTest/Bootstrap.Admin/HttpClientExtensions.cs
+++ b/test/UnitTest/Bootstrap.Admin/HttpClientExtensions.cs
@@ -1,6 +1,7 @@
-using Newtonsoft.Json;
+using Microsoft.Extensions.DependencyInjection;
 using System.Net.Http;
 using System.Net.Http.Headers;
+using System.Text.Json;
 using System.Threading.Tasks;
 
 namespace Bootstrap.Admin
@@ -18,7 +19,7 @@ namespace Bootstrap.Admin
         {
             var resp = await client.GetAsync(requestUri);
             var json = await resp.Content.ReadAsStringAsync();
-            return JsonConvert.DeserializeObject<T>(json);
+            return JsonSerializer.Deserialize<T>(json, new JsonSerializerOptions().Configure());
         }
 
         /// <summary>
@@ -34,7 +35,7 @@ namespace Bootstrap.Admin
         {
             var resp = await client.PostAsJsonAsync(requestUri, t);
             var json = await resp.Content.ReadAsStringAsync();
-            return JsonConvert.DeserializeObject<TRet>(json);
+            return JsonSerializer.Deserialize<TRet>(json, new JsonSerializerOptions().Configure());
         }
 
         /// <summary>
@@ -59,12 +60,12 @@ namespace Bootstrap.Admin
         public static async Task<TRet> DeleteAsJsonAsync<TValue, TRet>(this HttpClient client, string requestUri, TValue t)
         {
             var req = new HttpRequestMessage(HttpMethod.Delete, requestUri);
-            req.Content = new StringContent(JsonConvert.SerializeObject(t));
+            req.Content = new StringContent(JsonSerializer.Serialize(t));
             req.Content.Headers.ContentType = new MediaTypeHeaderValue("application/json");
 
             var resp = await client.SendAsync(req);
             var json = await resp.Content.ReadAsStringAsync();
-            return JsonConvert.DeserializeObject<TRet>(json);
+            return JsonSerializer.Deserialize<TRet>(json, new JsonSerializerOptions().Configure());
         }
 
         /// <summary>
@@ -90,7 +91,7 @@ namespace Bootstrap.Admin
         {
             var resp = await client.PutAsJsonAsync(requestUri, t);
             var json = await resp.Content.ReadAsStringAsync();
-            return JsonConvert.DeserializeObject<TRet>(json);
+            return JsonSerializer.Deserialize<TRet>(json, new JsonSerializerOptions().Configure());
         }
 
         /// <summary>