asp.net-mvc - Web API OData Controller 和授权属性

Question

我正在尝试使用 MVC 样式的授权过滤器作为 OData Web API Controller 的 Get() 操作方法的属性，但授权过滤器被忽略了。授权属性可以与 EntitySetController 或 ODataController 一起使用吗？

public class MyEntityController : EntitySetController<MyEntity, int>
{
    [CustomAuthorizeAttribute(AccessPermission.View)]
    [Queryable( AllowedQueryOptions = AllowedQueryOptions.All)]
    public override IQueryable<MyEntity> Get()
    {
        // Contents omitted.
    }
}

public class CustomAuthorizeAttribute : AuthorizeAttribute
{
    public AccessPermission RequiredPermission { get; set; }

    public CustomAuthorizeAttribute(AccessPermission requiredPermission)
    {
        RequiredPermission = requiredPermission;
    }
}

Answer 1

是的，他们可以，但是自定义 Auth Attributes 应该继承自 System.Web.Http.AuthorizeAttribute

试试这个实现:

public class CustomAuthorizeAttribute : System.Web.Http.AuthorizeAttribute
{
    public AccessPermission RequiredPermission { get; set; }

    public CustomAuthorizeAttribute(AccessPermission requiredPermission)
    {
        RequiredPermission = requiredPermission;
    }
}