Token store a set of data in (local/session storage or cookies), these could be stored in server or client side, the token itself is represented in hash of the cookie or session.
In token based authentication, when a request comes, it should have the token with it, the server first will authenticate the attached token with the request, then it will search for the associated cookie for it and bring the information needed from that cookie.
reate an empty web application project (C#) and install the below nuget packages:
Web API owin
Owin security cookie
ASP.NET identity core
Owin host system web
In the owin start up class, first we will initial web API routes: