Best practices to authorize users with Keycloak and ASP.Net Core

Question

I\'m curious what are the best, most common practices to authenticate and authorize users.

Currently I have:

• Keycloak identity provider to store users, handl