I have an ASP.NET CORE 3.1 web app using Windows Authentication.
At the head of my controllers I can use the [Authorize] attribute or leave it blank, eit
[Authorize]