I have started a project using asp.net core and Angular 7. I am a bit confused with the authentication.. I have already implemented a simple one but i'll need more like roles and the possibility to revoke tokens. So that leaves us with Identity but from what i read it isn't built for APIs. There is also Identity Server4 but i think that its totally overkill for a small app. What should i do? :/ I know there are providers like Auth0 but i don't want to use them.