How to set up Custom Authentication State in Blazor Server .net 8 or 9

Hi,
I set authentication settings in Blazor Server .NET 9.
After setting it, I put the [Authorize] attribute on the API call in the controller.

So it will fetch the authorization header of the access token, and the API will be authorized to show the result.

but on the Blazor server. Razor Pages: I never see a logged-in user.

I set a custom authentication state provider but am still facing an issue. Also there is another issue
Razor Pages does not show authorized attributes; they are not accessible and show 401.

Here is my code -
program.cs

builder.Services.AddAuthentication(options =>

{

   #region works but active user not showing

// Use JWT as the default authentication for APIs

options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;

options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;

// Keep cookies for web-based authentication

options.DefaultScheme = IdentityConstants.ApplicationScheme;

options.DefaultSignInScheme = IdentityConstants.ExternalScheme;

options.DefaultForbidScheme = IdentityConstants.ApplicationScheme;

#endregion
```})

.AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, options => //cookie autheticationscheme

{

```sql
options.Cookie.SecurePolicy = CookieSecurePolicy.Always;

options.Cookie.SameSite = SameSiteMode.None;
```}) // Cookie authentication for web apps

.AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, options => // JWT authentication for APIs

{

```typescript
options.TokenValidationParameters = new TokenValidationParameters

{

    ClockSkew = TimeSpan.Zero,

    SaveSigninToken = true,

    ValidateIssuer = true,

    ValidateAudience = true,

    ValidateLifetime = true,

    ValidateIssuerSigningKey = true,

    ValidIssuer = builder.Configuration["Jwt:Issuer"],

    ValidAudience = builder.Configuration["Jwt:Audience"],

    IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(builder.Configuration["Jwt:SecretKey"]) ?? throw new InvalidOperationException("Secret key not found"))

};

//options.Events = new JwtBearerEvents

//{

//    //OnMessageReceived = context =>

//    //{

//    //    Console.WriteLine($"Authorization Header: {context.Request.Headers["Authorization"]}");

//    //    return Task.CompletedTask;

//    //},

//    //OnTokenValidated = context =>

//    //{

//    //    Console.WriteLine("Token successfully validated!");

//    //    return Task.CompletedTask;

//    //},

//    //OnAuthenticationFailed = context =>

//    //{

//    //    Console.WriteLine($"Token validation failed: {context.Exception.Message}");

//    //    return Task.CompletedTask;

//    //}

//};

options.Events = new JwtBearerEvents

{

    OnTokenValidated = context =>

    {

        //context.Response.Cookies.Append("Program-cs", "Program.cs");

        Console.WriteLine("Token successfully validated!");

        return Task.CompletedTask;

    },

    OnAuthenticationFailed = context =>

    {

        Console.WriteLine($"Token validation failed: {context.Exception.Message}");

        return Task.CompletedTask;

    }

};
```})

.AddIdentityCookies();  
 

builder.Services.AddSingleton<IHttpContextAccessor, HttpContextAccessor>();

builder.Services.AddScoped<AuthenticationStateProvider, JwtAuthenticationStateProvider>();  
  
JwtAuthenticationStateProvider.cs  
  
public class JwtAuthenticationStateProvider : AuthenticationStateProvider

{

```java
readonly IHttpContextAccessor _acc;

//private AuthenticationState authenticationState;

public JwtAuthenticationStateProvider(IHttpContextAccessor acc) //CustomAuthenticationService service

{

    _acc = acc;

    //service.UserChanged += (newUser) =>

    //{

    //    authenticationState = new AuthenticationState(newUser);

    //    NotifyAuthenticationStateChanged(Task.FromResult(authenticationState));

    //};

}

public async override Task<AuthenticationState> GetAuthenticationStateAsync()

{

    var httpContext = _acc.HttpContext;

    if (httpContext == null)

    {

        throw new InvalidOperationException("null");

    }

    var token = httpContext.Request.Cookies["access_token"]; // Replace with your cookie name

    if (string.IsNullOrEmpty(token))

    {

        return new AuthenticationState(new ClaimsPrincipal());

    }

    var handler = new JwtSecurityTokenHandler();

    var jwtToken = handler.ReadJwtToken(token);

    var identity = new ClaimsIdentity(jwtToken.Claims, "Bearer");

    var user = new ClaimsPrincipal(identity);

    var authState = new AuthenticationState(user);

    NotifyAuthenticationStateChanged(Task.FromResult(authState));

    return authState;

}

public void NotifyUserAuthentication(ClaimsPrincipal user)

{

    NotifyAuthenticationStateChanged(Task.FromResult(new AuthenticationState(user)));

}

public void NotifyUserLogout()

{

    NotifyAuthenticationStateChanged(Task.FromResult(new AuthenticationState(new ClaimsPrincipal(new ClaimsIdentity()))));

}
```}