I have a aspnetcore server which issues jwt tokens to protect apis. It also provides openid connect login via google/facebook.
When logging in via web browser the standar