This is why you would need to implement CSRF measures if you use forms ... Hence, this is not a secure strategy unless you run your Web API over SSL. Secure Web API using basic authentication ...

Take advantage of the UseExceptionHandler middleware in ASP.Net Core to ensure that every error in your Web API application is caught Exceptions are runtime errors ...