ASP.NET Core comes with built-in support for cross-site request forgery (CSRF) checks in both old school form posts and AJAX requests.
https://blog.elmah.io/cross-site-request-forgery-csrf-with-asp-net-core-and-ajax/
origin - https://www.pipiscrew.com/2020/03/cross-site-request-forgery-csrf-with-asp-net-core-and-ajax/ cross-site-request-forgery-csrf-with-asp-net-core-and-ajax