Need help with "creating an authentication cookie"

using Microsoft.AspNetCore.Authentication.Cookies;

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddOpenApi();
builder.Services.AddControllers();

builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
    .AddCookie(options =>
    {
        options.SlidingExpiration = true;
        options.ExpireTimeSpan = TimeSpan.FromMinutes(10);
        options.Cookie.Name = "auth-cookie";
        options.Cookie.HttpOnly = true;
        options.Cookie.SameSite = SameSiteMode.Strict;
        options.Cookie.SecurePolicy = CookieSecurePolicy.Always;
        options.Cookie.IsEssential = true;
    });

builder.Services.AddHttpContextAccessor();

var app = builder.Build();

// Configure the HTTP request pipeline.
if (app.Environment.IsDevelopment())
{
    app.MapOpenApi();
}

app.UseHttpsRedirection();
app.UseAuthentication();
app.UseAuthorization();

app.MapControllers();

app.Run();

using Microsoft.AspNetCore.Authentication.Cookies;

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddOpenApi();
builder.Services.AddControllers();

builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
    .AddCookie(options =>
    {
        options.SlidingExpiration = true;
        options.ExpireTimeSpan = TimeSpan.FromMinutes(10);
        options.Cookie.Name = "auth-cookie";
        options.Cookie.HttpOnly = true;
        options.Cookie.SameSite = SameSiteMode.Strict;
        options.Cookie.SecurePolicy = CookieSecurePolicy.Always;
        options.Cookie.IsEssential = true;
    });

builder.Services.AddHttpContextAccessor();

var app = builder.Build();

// Configure the HTTP request pipeline.
if (app.Environment.IsDevelopment())
{
    app.MapOpenApi();
}

app.UseHttpsRedirection();
app.UseAuthentication();
app.UseAuthorization();

app.MapControllers();

app.Run();

using System.Security.Claims;
using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace CookieAuthApi;

[ApiController]
[Route("/api/auth")]
public class AuthController : ControllerBase
{
    [HttpPost]
    [Route("login")]
    public async Task<IActionResult> Login([FromBody] LoginRequest request)
    {
        // TODO: Actually check that the username and password are correct here.
        
        // Claims are used to store data about the logged-in user.
        var claims = new List<Claim>
        {
            new(ClaimTypes.Name, request.Username),
        };

        var identity = new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme);
        var principal = new ClaimsPrincipal(identity);

        var props = new AuthenticationProperties()
        {
            IsPersistent = true,
            ExpiresUtc = DateTimeOffset.UtcNow.AddDays(1),
            AllowRefresh = true,
            IssuedUtc = DateTimeOffset.UtcNow,
        };
        
        await HttpContext.SignInAsync(
            CookieAuthenticationDefaults.AuthenticationScheme,
            principal, props);
        
        return Ok();
    }

    [HttpGet]
    [Authorize]
    // This endpoint just returns the username of the logged-in user.
    // It is protected by the [Authorize] attribute, which means that only logged-in users can access it.
    public ActionResult<LoginResponse> Get()
    {
        var username = User.FindFirstValue(ClaimTypes.Name);

        if (username == null)
        {
            return Unauthorized();
        }
        
        return new LoginResponse(username);
    }
}

public record LoginResponse(string Username);

public record LoginRequest(string Username, string Password);

using System.Security.Claims;
using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace CookieAuthApi;

[ApiController]
[Route("/api/auth")]
public class AuthController : ControllerBase
{
    [HttpPost]
    [Route("login")]
    public async Task<IActionResult> Login([FromBody] LoginRequest request)
    {
        // TODO: Actually check that the username and password are correct here.
        
        // Claims are used to store data about the logged-in user.
        var claims = new List<Claim>
        {
            new(ClaimTypes.Name, request.Username),
        };

        var identity = new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme);
        var principal = new ClaimsPrincipal(identity);

        var props = new AuthenticationProperties()
        {
            IsPersistent = true,
            ExpiresUtc = DateTimeOffset.UtcNow.AddDays(1),
            AllowRefresh = true,
            IssuedUtc = DateTimeOffset.UtcNow,
        };
        
        await HttpContext.SignInAsync(
            CookieAuthenticationDefaults.AuthenticationScheme,
            principal, props);
        
        return Ok();
    }

    [HttpGet]
    [Authorize]
    // This endpoint just returns the username of the logged-in user.
    // It is protected by the [Authorize] attribute, which means that only logged-in users can access it.
    public ActionResult<LoginResponse> Get()
    {
        var username = User.FindFirstValue(ClaimTypes.Name);

        if (username == null)
        {
            return Unauthorized();
        }
        
        return new LoginResponse(username);
    }
}

public record LoginResponse(string Username);

public record LoginRequest(string Username, string Password);