ASP.NET Core comes with built-in support for cross-site request forgery (CSRF) checks in both old school form posts and AJAX requests. https://blog.elmah.io/cross-site-request-forgery-csrf-with-asp-net-core-and-ajax/
