Получение доступа с помощью cookies к защищённому api через oauth2.0 openid connect server. Клиенты asp.net core mvc, re

using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authentication.OpenIdConnect;
 
var builder = WebApplication.CreateBuilder(args);
builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen();
 
builder.Services.AddAuthentication(config =>
{
    config.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
    config.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
})
.AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, options =>
{
    options.Cookie.SameSite = SameSiteMode.None;
    options.Cookie.SecurePolicy = CookieSecurePolicy.Always;
    options.Cookie.HttpOnly = true;
    options.Cookie.IsEssential = true;
    options.ExpireTimeSpan = TimeSpan.FromSeconds(100);
    options.SlidingExpiration = true;
})
.AddOpenIdConnect(OpenIdConnectDefaults.AuthenticationScheme, options =>
{
    options.Authority = "https://localhost:44395";
    options.ClientId = "platform-net-6";
    options.ClientSecret = "123456789";
    options.ResponseType = "code";
    options.CallbackPath = "/signin-oidc";
    options.SaveTokens = true;
    options.UsePkce = true;
    options.AutomaticRefreshInterval = TimeSpan.FromMinutes(5);
   
    options.UseTokenLifetime = true;
    options.Scope.Clear();
    options.Scope.Add("openid");
    options.Scope.Add("profile");
    options.Scope.Add("offline_access");
    options.Scope.Add("dataEventRecords");
    options.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters
    {
        ValidIssuer = $"https://localhost:44395",
        RequireExpirationTime = true,
        ValidateLifetime = true,
    };
});
builder.Services.AddControllersWithViews();
builder.Services.AddControllers();
var app = builder.Build();
if (app.Environment.IsDevelopment())
{
    app.UseSwagger();
    app.UseSwaggerUI();
}
 
app.UseRouting();
 
app.UseHttpsRedirection();
 
 
app.UseCors(builder =>
{
    builder.WithOrigins("https://localhost:7256", "https://localhost:44390")
           .AllowAnyMethod()
           .AllowAnyHeader()
           .AllowCredentials();
});
 
 
app.UseAuthentication();
app.UseAuthorization();
 
app.MapControllers();
 
app.Run();