Tech
Dual Authentication in One ASP.NET Core App: JWT for API, Cookies for Web
Same codebase, same deployment. API routes use JWT bearer tokens, web routes use cookies. A 10-line policy selector makes them coexist without conflicts.