ASP.NET 8 Windows Authentication combined with custom policy authorization results in HandleRequirementAsync() being called twice for every request I created a new “ASP.NET Core Web API” project.