[Authorize] [ApiController] [Route("[controller]")] public class WeatherForecastController : ControllerBase { ... }