title: Authentication scenario for a combination of ASP.NET Views and SPAs
body: <p>I have an ASP.NET Core 2.2 website. It's a portal. Some pages are served by ASP MVC Views, other pages redirect to Angular SPAs. </p>
  
  <p>Some views of the ASP.NET site and some Angular apps need to be behind username/password.</p>
  
  <p>For Angular SPAs it makes sense to use JWT authentication. There is a login component that makes and API call, gets back a JWT token and stores it in the local storage. This works because the JwtBearer scheme was used in ASP.NET for authentication. But once I authenticated with JWT, how do I make plain (not-SPA) ASP.NET Views/Routes respect that JWT token? </p>
  
  <p>Is there a way to force browsers to automatically append the Authorization header based on a Jwt token?</p>
  
  <p>Is that possible to use cookie-based authentication in .NET along side of Jwt authentication?</p>
  
  <p>Is there another way?</p>
  
  <p>Thanks.</p>