如何在同一应用程序中对MVC web应用程序和web api进行身份验证/授权

services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
    .AddCookie(options =>
    {
        options.LoginPath = "/Account/Login"; // 登录页面的路径
        options.AccessDeniedPath = "/Account/AccessDenied"; // 拒绝访问页面的路径
    });

app.UseAuthentication();

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            ValidateIssuerSigningKey = true,
            ValidIssuer = "your_issuer", // 发行者
            ValidAudience = "your_audience", // 受众
            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("your_secret_key")) // 密钥
        };
    });

app.UseAuthentication();

[Authorize]
public IActionResult SecureAction()
{
    // 执行需要授权的操作
}

[Authorize(Roles = "Admin")]
public IActionResult SecureAction()
{
    // 执行需要授权的操作
}