JWT in front-end

[HttpPost("login")]
    public async Task<ActionResult> Login(LoginRequest request)
    {
        if (!ModelState.IsValid)
        {
            return BadRequest(ModelState);
        }

        var user = await _userManager.FindByEmailAsync(request.Email);
        if (user is null)
        {
            return Unauthorized(new RequestError
            {
                Code = HttpStatusCode.Unauthorized,
                Message = ErrorMessages.UserNotFound
            });
        }

        bool valid = await _userManager.CheckPasswordAsync(user, request.Password);
        if (!valid)
        {
            return Unauthorized(new RequestError
            {
                Code = HttpStatusCode.Unauthorized,
                Message = ErrorMessages.InvalidCredentials
            });
        }

        var claims = new List<Claim>
        {
            new Claim(ClaimTypes.NameIdentifier, user.Id),
            new Claim(ClaimTypes.Email, user.Email)
        };

        var identity = new ClaimsIdentity(claims, IdentityConstants.ApplicationScheme);
        var principal = new ClaimsPrincipal(identity);

        await HttpContext.SignInAsync(IdentityConstants.ApplicationScheme, principal);

        return Ok();
    }

[HttpPost("login")]
    public async Task<ActionResult> Login(LoginRequest request)
    {
        if (!ModelState.IsValid)
        {
            return BadRequest(ModelState);
        }

        var user = await _userManager.FindByEmailAsync(request.Email);
        if (user is null)
        {
            return Unauthorized(new RequestError
            {
                Code = HttpStatusCode.Unauthorized,
                Message = ErrorMessages.UserNotFound
            });
        }

        bool valid = await _userManager.CheckPasswordAsync(user, request.Password);
        if (!valid)
        {
            return Unauthorized(new RequestError
            {
                Code = HttpStatusCode.Unauthorized,
                Message = ErrorMessages.InvalidCredentials
            });
        }

        var claims = new List<Claim>
        {
            new Claim(ClaimTypes.NameIdentifier, user.Id),
            new Claim(ClaimTypes.Email, user.Email)
        };

        var identity = new ClaimsIdentity(claims, IdentityConstants.ApplicationScheme);
        var principal = new ClaimsPrincipal(identity);

        await HttpContext.SignInAsync(IdentityConstants.ApplicationScheme, principal);

        return Ok();
    }

[HttpPost("login")]
    public async Task<ActionResult> Login([FromForm] LoginRequest request)
    {
        if (!ModelState.IsValid)
        {
            return View(request);
        }

        var response = await _http.PostAsJsonAsync("https://localhost:9500/auth/login", request);
        if (!response.IsSuccessStatusCode)
        {
            Console.WriteLine(response.StatusCode);

            return View(request);
        }

        return RedirectToAction("Index", "Home");
    }

[HttpPost("login")]
    public async Task<ActionResult> Login([FromForm] LoginRequest request)
    {
        if (!ModelState.IsValid)
        {
            return View(request);
        }

        var response = await _http.PostAsJsonAsync("https://localhost:9500/auth/login", request);
        if (!response.IsSuccessStatusCode)
        {
            Console.WriteLine(response.StatusCode);

            return View(request);
        }

        return RedirectToAction("Index", "Home");
    }

// other services blablabla
builder.Services.AddIdentity<User, IdentityRole>(options =>
        {
            var section = builder.Configuration.GetSection("PasswordComplexity");

            options.Password.RequireNonAlphanumeric = section.GetValue<bool>("RequireNonAlphanumeric");
            options.Password.RequireLowercase = section.GetValue<bool>("RequireLowercase");
            options.Password.RequireUppercase = section.GetValue<bool>("RequireUppercase");
            options.Password.RequireDigit = section.GetValue<bool>("RequireDigit");
            options.Password.RequiredLength = section.GetValue<int>("RequiredLength");
        })
        .AddEntityFrameworkStores<ApplicationDbContext>();

        builder.Services.ConfigureApplicationCookie(options =>
        {
            options.Cookie.Name = "Poppsza.Auth";
            options.Cookie.SameSite = SameSiteMode.None;
            options.Cookie.SecurePolicy = CookieSecurePolicy.None;
            options.Cookie.HttpOnly = true;
            options.LoginPath = "/Auth/Login";
            options.LogoutPath = "/Auth/Logout";
            options.AccessDeniedPath = "/Auth/Denied";
        });

// other services blablabla
builder.Services.AddIdentity<User, IdentityRole>(options =>
        {
            var section = builder.Configuration.GetSection("PasswordComplexity");

            options.Password.RequireNonAlphanumeric = section.GetValue<bool>("RequireNonAlphanumeric");
            options.Password.RequireLowercase = section.GetValue<bool>("RequireLowercase");
            options.Password.RequireUppercase = section.GetValue<bool>("RequireUppercase");
            options.Password.RequireDigit = section.GetValue<bool>("RequireDigit");
            options.Password.RequiredLength = section.GetValue<int>("RequiredLength");
        })
        .AddEntityFrameworkStores<ApplicationDbContext>();

        builder.Services.ConfigureApplicationCookie(options =>
        {
            options.Cookie.Name = "Poppsza.Auth";
            options.Cookie.SameSite = SameSiteMode.None;
            options.Cookie.SecurePolicy = CookieSecurePolicy.None;
            options.Cookie.HttpOnly = true;
            options.LoginPath = "/Auth/Login";
            options.LogoutPath = "/Auth/Logout";
            options.AccessDeniedPath = "/Auth/Denied";
        });