Configure JWT auth

AuthenticationBuilderExtensions.cs

public static class AuthenticationBuilderExtensions
{
    public static AuthenticationBuilder ConfigureAuth(this AuthenticationBuilder builder, Action<AuthOptions> authOptions)
    {
        builder.Services.Configure(authOptions);
        builder.Services.AddSingleton<IConfigureOptions<JwtBearerOptions>, ConfigureJwtBearerOptions>();
        builder.AddJwtBearer();
        return builder;
    }

    private class ConfigureJwtBearerOptions : IConfigureNamedOptions<JwtBearerOptions>
    {
        private readonly AuthOptions _azureOptions;

        public ConfigureJwtBearerOptions(IOptions<AuthOptions> azureOptions)
        {
            _azureOptions = azureOptions.Value;
        }

        public void Configure(string name, JwtBearerOptions options)
        {
            var azureAdRootUrl = "https://login.microsoftonline.com/";
            options.Authority = $"{azureAdRootUrl}{_azureOptions.TenantId}";
            options.TokenValidationParameters = new TokenValidationParameters
            {
                ValidAudiences = new[]
                {
                    _azureOptions.ClientId
                },
                ValidIssuers = new[]
                {
                    $"{azureAdRootUrl}{_azureOptions.TenantId}/v2.0"
                }
            };
        }

        public void Configure(JwtBearerOptions options)
        {
            Configure(Options.DefaultName, options);
        }
    }
}