I have and angular client. And I have a .net server. Now once a user login, I send a JWT token in the response. The client stores the JWT token in local sotrage. my question is, a user can open the chrome dev tools and insert some data in the token key. Then the client will be able to see all the angular pages. So how can I create an api that validates if jwt token is correct or not ? public async Task<bool> ValidateToken(string token) { } Continue reading...