BFF server forwards JWT via AuthForwardingHandler to downstream services. Adding [Authorize] on BFF controllers causes "No authenticationScheme was specified" error since the BFF server itself has no JWT middleware configured. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>