Use auth first. Asp net core. authentication authorization. identity server. user only.