Blazor Web App with Web API as backend

[MarvinKlein1508]

I want to use an ASP.NET Core Web Api as my backend for a Blazor Server app. My Blazor app requires authentification.

When I create a new Blazor Web App from scratch with individual accounts selected I get the authentification based on ASP.NET Core Identity which I really like but how would logic in my ASP.NET Core Web Api?

Should my Web API create JWTs instead which should be utilized by the Blazor App? If so, how should I save and consume those tokens in my Blazor app? How would I handle expired tokens? And how would I check in my Api, if the roles of my user have been changed for example?

Could someone guide me here into the right direction?