First, let me say that we love IdentityServer4.  It doesn’t hurt that we have been using IdentityServer since its early days or that Brock Allen is a good friend of ours.  We are doing some IdentityServer work for our customers and I needed to create a sample application that requires authentication for all pages.  After some digging around, I found that we can add a global filter for authorization.  Neat!