asp.net web api 用户身份验证

        前后端分离的开发中，应用服务需要进行用户身份的验证才允许访问数据。实现的方法很简单。创建一个webapi项目。在App_Start目录下找到WebApiConfig.cs， 在里面增加一个实现类。

  public static class WebApiConfig
    {
        public static void Register(HttpConfiguration config)
        {
            // Web API 配置和服务
            config.Filters.Add(new CustomAuthorize());
            // Web API 路由
            config.MapHttpAttributeRoutes();

            config.Routes.MapHttpRoute(
                name: "DefaultApi",
                routeTemplate: "api/{controller}/{id}",
                defaults: new { id = RouteParameter.Optional }
            );
        }

        public class CustomAuthorize : AuthorizationFilterAttribute
        {
            public override void OnAuthorization(HttpActionContext actionContext)
            {
                //如果用户的Action带有AllowAnonymousAttribute，则不用检测
                if (actionContext.ActionDescriptor.GetCustomAttributes().Any())
                {
                    return;
                }

                app 接口检测 
                object au = actionContext.Request.Headers.Authorization;
                if (au == null)
                {
                    actionContext.Response = actionContext.Request.CreateResponse(HttpStatusCode.Unauthorized, new { Ret = 4002, Msg = "Token错误!" });
                }
                else if (!Redis.haskey(au.ToString()))
                {
                    actionContext.Response = actionContext.Request.CreateResponse(HttpStatusCode.Unauthorized, new { Ret = 4008, Msg = "Token超时!" });
                }
            }
        }
    }

Controller 类的实现：

 [RoutePrefix("api/v1")]
    public class ValuesController : ApiController
    {
        [AllowAnonymous]  //匿名访问
        [Route("getData1"), HttpPost]
        public JObject getData1([FromBody] JObject data)
        {
            return data;
        }

        //登录访问
        [Route("getData2"), HttpPost]
        public JObject getData2([FromBody] JObject data)
        {
            return data;
        }

    }