JWT Authentication - Startup ConfigureServices Method

Startup.cs

public void ConfigureServices(IServiceCollection services)
{
    services.AddCors();
    services.AddControllers();

    services.AddDbContext<ApplicationDbContext>(options =>
        options.UseSqlServer(Configuration.GetConnectionString("SqlConnection")));

    services.AddIdentity<IdentityUser, IdentityRole>(options => options.SignIn.RequireConfirmedAccount = true)
        .AddEntityFrameworkStores<ApplicationDbContext>();

    // configure strongly typed settings objects
    var jwtSection = Configuration.GetSection("JwtBearerTokenSettings");
    services.Configure<JwtBearerTokenSettings>(jwtSection);
    var jwtBearerTokenSettings = jwtSection.Get<JwtBearerTokenSettings>();
    var key = Encoding.ASCII.GetBytes(jwtBearerTokenSettings.SecretKey);

    services.AddAuthentication(options =>
    {
        options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
        options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
    })
    .AddJwtBearer(options =>
    {
        options.RequireHttpsMetadata = false;
        options.SaveToken = true;
        options.TokenValidationParameters = new TokenValidationParameters()
        {
            ValidateIssuer = true,
            ValidIssuer = jwtBearerTokenSettings.Issuer,
            ValidateAudience = true,
            ValidAudience = jwtBearerTokenSettings.Audience,
            ValidateIssuerSigningKey = true,
            IssuerSigningKey = new SymmetricSecurityKey(key),
            ValidateLifetime = true,
            ClockSkew = TimeSpan.Zero
        };
    });
}