I have a dotnet Web API I’m developing locally. It uses two different authentication schemes, both JWT bearer schemes – one is for “user” tokens (issued by my own Identity provider) and the other is for “service” tokens which are issued by my Azure tenant. I’ll add some code below to show the setup of these schemes, but I’m not doing anything unusual.