Search: ASP.NET Core behind IIS: preserve JSON API error responses instead of IIS HTML errors; token-only API must requi

Public search query: ASP.NET Core behind IIS: preserve JSON API error responses instead of IIS HTML errors; token-only API must require HTTPS; embedded OpenAPI client handling insecure test origins without weakening authentication.

Problem outcome: unknown