Secure APIs only allow access to authenticated users. In ASP.NET Core, we can use the ASP.NET Core Identity framework to authenticate users and provide authorized access to protected resources.