Pinpoint helped me get this prototype off the launch pad - I was very close except for:
You must register the OAuth2 bearer authentication middleware before MVC, or your users will be unauthenticated when reaching MVC:
public class Startup {
public void Configure(IApplicationBuilder app) {
app.UseJwtBearerAuthentication(new JwtBearerOptions {
// Your JWT bearer options.
});
app.UseMvc();
}
}