WEB API IdentityServer4: Building a Simple Token Server and Protecting Your ASP.NET Core APIs with JWT Introduction I got many questions how the ASP.NET Core ApiBoilerplate protects the API endpoints and which URL validates the token. If you are new to ASP.NET Core and are using the template to get started, chances are you might ask the same