After scrolling the internet I found some samples from dotnet.

public class UnauthorizedHandler : IAuthorizationMiddlewareResultHandler
{
    private readonly IAuthorizationMiddlewareResultHandler _handler;

    public UnauthorizedHandler()
    {
        // you can inject the UmbracoContext
        _handler = new AuthorizationMiddlewareResultHandler();
    }

    public async Task HandleAsync(RequestDelegate next, HttpContext context, AuthorizationPolicy policy, PolicyAuthorizationResult authorizeResult)
    {
        // this means the user is authorized, and we shouldn't handle anything
        if (!authorizeResult.Forbidden || authorizeResult.AuthorizationFailure is null)
        {
            // Fallback to the default handler
            await _handler.HandleAsync(next, context, policy, authorizeResult);
            return;
        }

        // do anything with the umbraco context, get nodes, etc
        // add your own code here
        context.Request.Redirect("/your-umbraco-url");
    }
}

you need to register this to the IServiceCollection

services.AddScoped<IAuthorizationMiddlewareResultHandler, UnauthorizedHandler>();