I'm integrating Microsoft Entra ID into Svelte SPA and ASP.NET Core Web API. The goal is to secure