User always null in my API controller

[DotCat1985]

Hi,
I developed an API controller using OrchardCore 1.2.2 and File Manager UI component by Syncfusion as following:

...
namespace OrchardCore.FileManager.Controllers
{
    [Route("api/filemanager")]
    [ApiController]
    [Authorize(AuthenticationSchemes = "Api"), IgnoreAntiforgeryToken, AllowAnonymous]
    public class ApiController : Controller
    {
        ...

        // Processing the Download operation
        [Route("Download")]
        [HttpPost]
        public IActionResult Download(string downloadInput)
        {
	    if (!await _authorizationService.AuthorizeAsync(User, Permissions.ManageTenants))
            {
                return this.ChallengeOrForbid("Api");
            }
            if (downloadInput == null)
            {
                downloadInput = (string) Request.Form["downloadInput"];
            }
            FileManagerDirectoryContent args = JsonConvert.DeserializeObject<FileManagerDirectoryContent>(downloadInput);
            //Invoking download operation with the required paramaters
            // path - Current path where the file is downloaded; Names - Files to be downloaded;
            return operation.Download(args.Path, args.Names);
        }
	...
    }
}

But, when I invoke Download action from the view below, the object User is always null
Should I pass token or anything to my API action?

@using Syncfusion.EJ2
@{
    string[] items = new string[] { "Delete", "Download", "SortBy", "Refresh", "Selection", "View", "Details" };
    string[] files = new string[] { "Open", "|", "Delete", "Download", "|", "Details" };
    string[] folder = new string[] { "Open", "|", "Delete", "Download", "|", "Details" };
    string[] layout = new string[] { "SortBy", "View", "Refresh", "|", "Details", "|", "SelectAll" };
}

 @* Syncfusion Essential JS 2 Styles *@
<link rel="stylesheet" href="https://cdn.syncfusion.com/ej2/material.css" />

@* Syncfusion Essential JS 2 Scripts *@
<script src="https://cdn.syncfusion.com/ej2/dist/ej2.min.js"></script>

<h1>@T["File manager"]</h1>

<div class="col-lg-12 control-section">
    <div class="control_wrapper">
        @* File Manager API sample *@
        <ejs-filemanager id="filemanager" view="@Syncfusion.EJ2.FileManager.ViewType.LargeIcons">
            <e-filemanager-ajaxsettings url="/api/filemanager/FileOperations"
                                        downloadUrl="/api/filemanager/Download">
            </e-filemanager-ajaxsettings>
            <e-filemanager-contextmenusettings file="files" folder="folder" layout="layout">
            </e-filemanager-contextmenusettings>
            <e-filemanager-toolbarsettings items="items">
            </e-filemanager-toolbarsettings>
            <e-filemanager-navigationpanesettings visible="true">
            </e-filemanager-navigationpanesettings>
        </ejs-filemanager>
    </div>
</div>

<style> 
    #filemanager .e-empty-inner-content { 
        display: none; 
    } 
</style> 

@* Syncfusion Essential JS 2 ScriptManager *@
<ejs-scripts></ejs-scripts>

[Skrypt]

You need to enable the "OpenID Token Validation" feature at least.

[DotCat1985]

OK, thank you