sop-dotnet-jwt-webapi sop-dotnet-jwt-webapi https://developpaper.com/asp-net-add-jwt-authentication-to-core-3-1-web-api-1-add-jwttoken-to-control-api-access/ https://stackoverflow.com/questions/59310193/allowanonymous-is-not-ignored-in-asp-net-core-custom-authenticationhandler-after