* Edit: project is only a web-api, front-end will be developed in react(next.js)

Hi guys! 

I’m a TypeScript Fullstack developer and I’m new to .NET and ASP.NET and basically this is one of my first projects using C# and .NET.

My project’s architecture requires a kind of different than out-of-the-box way of identifying users.

I want Google Authentication which will create a local account (which I can relate other entities to)

And JWT Tokens (access, refresh) generated and sent as cookies to the client and each protected endpoint to be using these cookies to authorize the requesting user.

I haven’t figured out a way of implementing this and still using mostly OOTB tools in order to keep modifications little as possible.

Any tips and tricks on how to implement it?

* Edit2: 

Just to be clear, I know how to create endpoints, and protected endpoints using the built in identity framework, using roles, etc… Its this combination of Google Auth, generating tokens, sending them to client as cookies basically is where my difficulty relies.

* I have almost a blank new project, already set up with only google credentials

​  * Edit: project is only a web-api, front-end will be developed in react(next.js) Hi guys!  I’m a TypeScript Fullstack developer and I’m new to .NET and ASP.NET and basically this is one of my first projects using C# and .NET. My project’s architecture requires a kind of different than out-of-the-box way of identifying users.I want Google Authentication which will create a local account (which I can relate other entities to)And JWT Tokens (access, refresh) generated and sent as cookies to the client and each protected endpoint to be using these cookies to authorize the requesting user. I haven’t figured out a way of implementing this and still using mostly OOTB tools in order to keep modifications little as possible. Any tips and tricks on how to implement it? * Edit2: Just to be clear, I know how to create endpoints, and protected endpoints using the built in identity framework, using roles, etc… Its this combination of Google Auth, generating tokens, sending them to client as cookies basically is where my difficulty relies. * I have almost a blank new project, already set up with only google credentials   Read More

​