tutorial-dotnet-JWTProtectedAPI GetMyProfile()

AccountController.cs

        //Rest of the SignIn() and ValidateUserCredentials() methods
        [HttpGet]
        //We add this annotation to tell the framework this is service/route requires Authorization Claims i.e JWT
        [Authorize]
        [Route("my-profile")]
        public async Task<ActionResult<UserProfile>> GetMyProfile()
        {
            try
            {
                //Todo add your business validation here
                //! You may want to edit catched exceptions block to handle failed scenarios
                string userEmail = User.FindFirst(ClaimTypes.Email)?.Value;
                IdentityUser user = await _userManager.FindByEmailAsync(userEmail);

                return Ok(new UserProfile()
                {
                    Email = user.Email,
                    Username = user.UserName,
                    PhoneNumber = user.PhoneNumber
                });
            }
            catch (System.Exception error)
            {
                return BadRequest(new
                {
                    message = error.Message
                });
            }
        }