But after that the battle began, it took me almost 20 hours to get this working in our AKS cluster with OIDC identity provider.
Even with AI chat to help me out, which sometimes was not in the right direction.
First I had to overcome CORS problems, then I got 401 unauthorized on the websocket, after that long polling was working but websockets not.
For the full write-up: 20 hours to get SignalR (OpenID/JWT) working in AKS, compared to my 20-minute local setup