We are getting 403 in core webapi using certificate pfx

this is our controller

[Route("api/[controller]")]
[ApiController]
public class TestController : ControllerBase
{
[Authorize]
[HttpPost]
public string Post() => "The action works fine only with a certificate";
}


public void ConfigureServices(IServiceCollection services)
{
services.AddControllers();
services.AddTransient<certificatevalidation>();
services.AddAuthentication(CertificateAuthenticationDefaults.AuthenticationScheme).AddCertificate(options => {
options.AllowedCertificateTypes = CertificateTypes.SelfSigned;
options.Events = new CertificateAuthenticationEvents
{
OnCertificateValidated = context => {
var validationService = context.HttpContext.RequestServices.GetService<certificatevalidation>();
if (validationService.ValidateCertificate(context.ClientCertificate))
{
context.Success();
}
else
{
context.Fail("Invalid certificate");
}
return Task.CompletedTask;
},
OnAuthenticationFailed = context => {
context.Fail("Invalid certificate");
return Task.CompletedTask;
}
};
});
services.AddSwaggerGen(c =>
{
c.SwaggerDoc("v1", new OpenApiInfo { Title = "WebApiCertificateAuth", Version = "v1" });
});
}



using System;
using System.Collections.Generic;
using System.Linq;
using System.Security.Cryptography.X509Certificates;
using System.Threading.Tasks;

namespace WebApiCertificateAuth
{
public class CertificateValidation
{
public bool ValidateCertificate(X509Certificate2 clientCertificate)
{
string[] allowedThumbprints = { "310084D83EC974AEE7FC0B0D5175E11CA5E8DE6D" };
if (allowedThumbprints.Contains(clientCertificate.Thumbprint))
{
return true;
}
return false;
}
}
}