services.AddAuthentication(o =>
            {
                o.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                o.DefaultSignInScheme = JwtBearerDefaults.AuthenticationScheme;
                o.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
            })
            .AddJwtBearer("JwtBearer", options =>
            {
                options.RequireHttpsMetadata = false;
                options.SaveToken = true;
                options.TokenValidationParameters = new TokenValidationParameters
                {
                    // издатель
                    ValidateIssuer = true,
                    ValidIssuer = _configuration["AuthOptions:ISSUER"],

                    // потребитель
                    ValidateAudience = true,
                    ValidAudience = _configuration["AuthOptions:AUDIENCE"],

                    IssuerSigningKey = AuthOptions.GetSymmetricSecurityKey(_configuration["AuthOptions:KEY"]),
                    ValidateIssuerSigningKey = true,

                    ValidateLifetime = true,
                };
            });