Hi,

I cannot find an example on how to implement JWT Tokens correctly into an dotnet core 2.1 webapi with a login (and logout) action that returns a JWT Token.

Login action would provide the JWT token if given the correct loging credentials : email and password

In my startup.cs i;m using:

      services.AddAuthentication(options =>

        {

          options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;

          options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;

          options.DefaultSignInScheme = JwtBearerDefaults.AuthenticationScheme;

        })

        .AddOktaWebApi(new OktaWebApiOptions()

        {

          ClientId = "***************",//Configuration["Okta:ClientId"],

          OktaDomain = "****************",//Configuration["Okta:OktaDomain"],

          AuthorizationServerId = "****************" //Configuration["Okta:AuthorizationServerId"]

        });

And I configured swagger ui to add a bearer token so that if i use the login action correctly i would retrieve a JWT token from some Okta service, and this is the point where I don't known what to use in the okta services stack? Which i then can use to authorize for actions that need authorization.

Hope this is clear enough, the examples i found don't include a sort of standalone webapi login action/functionality that uses Okta service(s).

The frontend will be an Angular 6 application that uses the login action and the returned JWT Token to authenticate for the private webapi calls.

Hope this makes sense ;)