Custom AuthorizeAttribute - use same controller for logged in- and api users

Question

I have an api-controller that is used by a couple of desktop applications to fetch data. The caller can either use Basic or JwtBearer authentication, and it works.