.Net Core 2.1 Web API同时使用JWT和JWT Cookie

[Authorize] //Cookie auth?!
[Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
public class ValuesController : ControllerBase

Startup.cs:

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddJwtBearer(...)

...

services.AddIdentity<ApplicationUser, IdentityRole>()

AddAuthentication()

我的问题是如何为操作/控制器同时激活JWT和ASP.NET身份验证。