Detailed 401 errors SPA bearer token

{
  "Logging": {
    "LogLevel": {
      "Default": "debug",
      "Microsoft.AspNetCore": "Warning"
    },
    "Microsoft.Hosting.Lifetime": "Information",
    "Microsoft.AspNetCore.Authentication": "debug",
    "Microsoft.AspNetCore.Authorization": "debug"
  }
}

{
  "Logging": {
    "LogLevel": {
      "Default": "debug",
      "Microsoft.AspNetCore": "Warning"
    },
    "Microsoft.Hosting.Lifetime": "Information",
    "Microsoft.AspNetCore.Authentication": "debug",
    "Microsoft.AspNetCore.Authorization": "debug"
  }
}

{
  "Logging": {
    "LogLevel": {
      "Default": "debug",
      "Microsoft.AspNetCore": "debug"
    },
    "Microsoft.Hosting.Lifetime": "debug",
    "Microsoft.AspNetCore.Authentication": "debug",
    "Microsoft.AspNetCore.Authorization": "debug"
  }
}

{
  "Logging": {
    "LogLevel": {
      "Default": "debug",
      "Microsoft.AspNetCore": "debug"
    },
    "Microsoft.Hosting.Lifetime": "debug",
    "Microsoft.AspNetCore.Authentication": "debug",
    "Microsoft.AspNetCore.Authorization": "debug"
  }
}

builder.Services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme).AddOpenIdConnect(options =>
{
    options.Authority = "https://xxxx";
    // options.Authority = "https://localhost:5001";
    options.ClientId = "xxxx";
});

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer(options =>
{
    options.Authority = "https://xxxxx";
    // options.Authority = "https://localhost:5001";
    options.TokenValidationParameters.ValidateAudience = false;
});

builder.Services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme).AddOpenIdConnect(options =>
{
    options.Authority = "https://xxxx";
    // options.Authority = "https://localhost:5001";
    options.ClientId = "xxxx";
});

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer(options =>
{
    options.Authority = "https://xxxxx";
    // options.Authority = "https://localhost:5001";
    options.TokenValidationParameters.ValidateAudience = false;
});

  token_endpoint_auth_method: 'none',
  //client_secret: '...' //removed

  token_endpoint_auth_method: 'none',
  //client_secret: '...' //removed

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer(options =>
{
    options.Authority = "https://localhost:3000";
    options.ClaimsIssuer = "https://localhost:3000";
    options.TokenValidationParameters.ValidateAudience = false;
    options.TokenValidationParameters = new TokenValidationParameters()
    {
        ValidateAudience = false,
        ValidIssuers = new[] { "http://localhost:3000" },
        // IDX10500: Signature validation failed. No security keys were provided to validate the signature on K8s
        SignatureValidator = delegate (string token, TokenValidationParameters parameters)
        {
            var jwt = new Microsoft.IdentityModel.JsonWebTokens.JsonWebToken(token);
            return jwt;
        }
    };
});

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer(options =>
{
    options.Authority = "https://localhost:3000";
    options.ClaimsIssuer = "https://localhost:3000";
    options.TokenValidationParameters.ValidateAudience = false;
    options.TokenValidationParameters = new TokenValidationParameters()
    {
        ValidateAudience = false,
        ValidIssuers = new[] { "http://localhost:3000" },
        // IDX10500: Signature validation failed. No security keys were provided to validate the signature on K8s
        SignatureValidator = delegate (string token, TokenValidationParameters parameters)
        {
            var jwt = new Microsoft.IdentityModel.JsonWebTokens.JsonWebToken(token);
            return jwt;
        }
    };
});

  features: {
    jwtUserinfo: { enabled: true },
    jwtResponseModes: { enabled: true },

  features: {
    jwtUserinfo: { enabled: true },
    jwtResponseModes: { enabled: true },

dbug: Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler[9]
      AuthenticationScheme: Bearer was not authenticated.
dbug: Microsoft.AspNetCore.Authorization.AuthorizationMiddleware[0]
      Policy authentication schemes  did not succeed
info: Microsoft.AspNetCore.Authorization.DefaultAuthorizationService[2]
      Authorization failed. These requirements were not met:
      DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
info: Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler[12]
      AuthenticationScheme: Bearer was challenged.
info: Microsoft.AspNetCore.Hosting.Diagnostics[2]
      Request finished HTTP/2 GET https://localhost:44306/WeatherForecast - 401 - - 41.8524ms
dbug: Microsoft.AspNetCore.Server.IIS.Core.IISHttpServer[1]

dbug: Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler[9]
      AuthenticationScheme: Bearer was not authenticated.
dbug: Microsoft.AspNetCore.Authorization.AuthorizationMiddleware[0]
      Policy authentication schemes  did not succeed
info: Microsoft.AspNetCore.Authorization.DefaultAuthorizationService[2]
      Authorization failed. These requirements were not met:
      DenyAnonymousAuthorizationRequirement: Requires an authenticated user.
info: Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler[12]
      AuthenticationScheme: Bearer was challenged.
info: Microsoft.AspNetCore.Hosting.Diagnostics[2]
      Request finished HTTP/2 GET https://localhost:44306/WeatherForecast - 401 - - 41.8524ms
dbug: Microsoft.AspNetCore.Server.IIS.Core.IISHttpServer[1]

if (this.grant_types.includes('implicit')) {
              if (protocol === 'http:') {
                this.invalidate(`${label} for web clients using implicit flow MUST only register URLs using the https scheme`, 'implicit-force-https');
              }

              if (hostname === 'localhost') {
                this.invalidate(`${label} for web clients using implicit flow must not be using localhost`, 'implicit-forbid-localhost');
              }
            }

if (this.grant_types.includes('implicit')) {
              if (protocol === 'http:') {
                this.invalidate(`${label} for web clients using implicit flow MUST only register URLs using the https scheme`, 'implicit-force-https');
              }

              if (hostname === 'localhost') {
                this.invalidate(`${label} for web clients using implicit flow must not be using localhost`, 'implicit-forbid-localhost');
              }
            }

  response_types: ['id_token'],

  response_types: ['id_token'],

  grant_types: ['refresh_token', 'authorization_code', 'implicit'],

  grant_types: ['refresh_token', 'authorization_code', 'implicit'],