Only authenticated clients should be able to make POST, PUT, and DELETE requests.

[Xtrendence]

https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/basic-authentication
https://www.c-sharpcorner.com/article/basic-authentication-in-web-api/