https://skyethe.dev/posts/dotnet-core-web-api-identity-token-authentication/