services.AddSession(options =>
            {
                options.IdleTimeout = TimeSpan.FromMinutes(expiresSession);
                options.Cookie.HttpOnly = true;
            });

services.AddCors(o => o.AddPolicy("CustomPolicy", builder =>
            {
                builder.SetIsOriginAllowed(_ => true)
                        .AllowAnyOrigin()
                        .AllowAnyMethod()
                        .AllowAnyHeader()
                        .AllowCredentials();;
            }));