I am following IdentityServer 4 samples for a JS SPA calling a backend API. All is working however within the API (.NET CORE) I am getting the access token from the js clie