Authorized API returns HTML when the controller is hit and not the content

Question

I have a very basic web API controller within an identity server project:

namespace Project.IDP.Controllers
{
    [Route("api/[controller]")]
    [A