DataProtectorTokenProvider ValidateAsync Always False

[FolabiAhn]

I'm trying to generate and validate a token with DataProtectorTokenProvider<TUser>
I generate the code using GenerateAsync method in POST Action and then use ValidateAsync to validate it in another action PUT

public class VerifyPhoneNumberController : ControllerBase
{
	...
	private readonly DataProtectorTokenProvider<ApplicationUser> _dataProtectorTokenProvider;
        private readonly UserManager<ApplicationUser> _userManager;
	...
	
	public VerifyPhoneNumberController(DataProtectorTokenProvider<ApplicationUser> dataProtectorTokenProvider, 
               UserManager<ApplicationUser> userManager)
	{
		...
		_dataProtectorTokenProvider = dataProtectorTokenProvider  ?? throw new ArgumentNullException(nameof(dataProtectorTokenProvider));
                _userManager = userManager ?? throw new ArgumentNullException(nameof(userManager));
		...
	}

	public async Task<IActionResult> Post([FromBody] PhoneLoginRequest request)
	{
		...
		var resendToken = await _dataProtectorTokenProvider.GenerateAsync("resend_token", _userManager, user);
                // here token is valid
		var isTokenValid = await _dataProtectorTokenProvider.ValidateAsync("resend_token", resendToken, _userManager, user);
		...
	}


	public async Task<IActionResult> Put([FromBody] ResendOtpCodeRequest request)
	{
		...
                // same token here is invalid
		if (!await _dataProtectorTokenProvider.ValidateAsync("resend_token", request.ResendToken, _userManager, user))
		{
			return BadRequest("Invalid resend token");
		}
		...
	}
}

However, the response from the ValidateAsync method is always false.

When I generate the code and validate within the same action(POST), it return true.

Why I can't call method ValidateAsync in a separate request ?

I debug ValidateAsync method and for somehow it returning false when it tries to compare the userId and actualUserdId
Both (userId, actualUserId) are set (Guid values) but different ? How possible ?

var userId = reader.ReadString();
var actualUserId = await manager.GetUserIdAsync(user);
if (userId != actualUserId)
{
    Logger.UserIdsNotEquals();
    return false;
}

Am I missing something obvious ?
It is like the DataProtectorTokenProvider injected in my controller is not keeping data in memory.

Am I getting new instance of DataProtectorTokenProvider per request ?