ASP.NET Core Pitfalls – AJAX Requests and XSRF by @RJPeres75 weblogs.asp.net

When using Anti Cross Site Scripting Forgery (XSRF) protection in your application, which is on by default, you may be surprised when you try to AJAX submit to a controller and you get a HTTP 400 Bad Request: this may be happening because the framework is blocking your request due to XS