I wasn't able to get antiforgery headers working while placing the code app.Use(next => context => as the first piece of middleware. It worked after placing just before app.UseMvc(...

Edit: Add RP samples

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 47b14f57-82ac-a2e2-cbc7-22a81a60f4ac
• Version Independent ID: bffca13c-223f-c61f-9cb2-9da8811eecfa
• Content: Prevent Cross-Site Request Forgery (XSRF/CSRF) attacks in ASP.NET Core
• Content Source: aspnetcore/security/anti-request-forgery.md
• Product: aspnet-core
• Technology: aspnetcore-security
• GitHub Login: @steve-smith
• Microsoft Alias: riande