Question

我想检查访问令牌是否在黑名单中，然后返回Unauthorized。

public class CheckBannedTokenAttribute : Attribute, IAsyncAuthorizationFilter
{
    public Task OnAuthorizationAsync(AuthorizationFilterContext context)
    {
        if (TokenInBlackList("232322323"))
        {
            //context.Result = new HttpStatusCodeResult(HttpStatusCode.Unauthorized);
        }
    }
}

Answer 1

您的代码似乎都很好，只需初始化Response并返回Task

即可

if (TokenInBlackList("232322323")){
    context.Response = context.Request.CreateResponse(HttpStatusCode.Unauthorized);
    return Task.FromResult<object>(null);
}

Answer 2

你是对的，你需要填写context.Result。因为您希望将401 Unauthorized作为回复返回，请使用内置的UnauthorizedResult类：

if (TokenInBlackList("232322323"))
{
   context.Result = new UnauthorizedResult();
   return Task.CompletedTask;
}

通常，这与new StatusCodeResult(401)

相同

Answer 3

这将为您提供您期望的经典“401 Unauthorized”。

async Task IAsyncAuthorizationFilter.OnAuthorizationAsync(AuthorizationFilterContext context)
{
    ClaimsPrincipal user = context.HttpContext.User;

    if (!user.Identity.IsAuthenticated)
    {
        context.Result = new ChallengeResult();
    }
}

使用授权过滤器返回状态代码

3 个答案: