not sure what your issue was with combined server, but I suspect you have only deferred it. be sure you used net 6.
on issue you may face. blazor server uses signal/r to communicate with the client browser. this is one connection done at page load, so there is only one authentication done at the connection as the connection stays open. this means any token you get will quickly expire.