Using the WebAuthenticator with the Sample.Server.WebAuthenticator?

Using the setup from the WebAuthenticator sample and guide, is it possible to use the [Authorize] attribute on a WebApi Controller to prevent anomymous access?

Guide
https://docs.microsoft.com/en-us/xamarin/essentials/web-authenticator?context=xamarin/android&tabs=android

Server sample
https://github.com/xamarin/Essentials/tree/develop/Samples/Sample.Server.WebAuthenticator

• Would I need other configuration server side, besides adding a controller i want to acces and use the [Authorize] attribute?
• Is the token from Web Authenticator a bearer token? Is it enough in theory to add it to the HttpClient's headers as a bearer?