I'm working on my first .net api application. I won't need the ability to log in using things like Facebook, Google etc.

I want to be able to control roles and permissions. But I'm not too sure where to go from here. I went through the "Securing ASP.NET Core with OAuth2 and OpenID Connect" Pluralsight course but it seems really complicated for what I want to do.

What are you using for authentication and authorization in your .Net applications?