Añadiendo soporte para autenticacion contra keycloak(o en su defecto cualquier proveedor oauth/oidc)

Startup.cs

builder.Services.AddAuthorization();
builder.Services.AddAuthentication(options =>
{
    options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
    options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
}).AddJwtBearer(o =>
{
    o.RequireHttpsMetadata = false;
    o.Authority = config.GetValue<string>("Jwt:Authority");
    o.Audience = config.GetValue<string>("Jwt:Audience");    
});