.net Core Securing API

I am looking to secure an API with .NET Core. Not sure of the best practices, but I'd like to use token based authentication, oAuth2, or private/public keys. I have specific access requirements for each API endpoint that I need to protect, and I'm looking to protect privileged API endpoints as well. Please let me know what your experience and strategies are when it comes to securing an API with .NET Core.