https://github.com/aspnet/Identity/blob/dev/src/Microsoft.AspNetCore.Identity.EntityFrameworkCore/UserStore.cs

The last line of the GetRolesAsync method is:

return await query.ToListAsync();

This should be passed the cancellation token and is inconsistent with the rest of the class, i.e.

return await query.ToListAsync(cancellationToken);