Angular + .NET Core Web API + Cookie Authentication + Same Domain = Secure?

Question

I have yet to find an example of Angular Authentication using a .NET Core Web API backend and cookie authentication. I discovered back in 2019 that as long as the angular SPA is