AuthorizeAttribute授权

[colindcli]

Filter 类型 | 实现的接口 | 描述 Authorization | IAuthorizationFilter | 最先运行的Filter，被用作请求权限校验 Action | IActionFilter | 在Action运行的前、后运行 Exception | IExceptionFilter | 当异常发生的时候运行

[colindcli]

API和MVC都继承AuthorizeAttribute实现授权

[AttributeUsage(AttributeTargets.Class | AttributeTargets.Method)]
public class AuthFilter : AuthorizeAttribute

授权错误过滤

[colindcli]

API判断授权后赋值给BaseController：

protected override bool IsAuthorized(HttpActionContext actionContext)
{
    var baseController = actionContext.ControllerContext.Controller as BaseController;
}