我已將 dotnet core 2.2 升級到 3.preview 7。因此之后，我無法獲取自定義屬性。context.Resource在版本 2.2 中是類型 of AuthorizationFilterContext，但在版本 3 中是類型 of Microsoft.AspNetCore.Http.Endpoint?，F在我無法從端點獲取屬性。using Microsoft.AspNetCore.Authorization;using Microsoft.AspNetCore.Mvc.Controllers;using Microsoft.AspNetCore.Mvc.Filters;using System;using System.Collections.Generic;using System.Linq;using System.Reflection;using System.Threading.Tasks;namespace Gamma.Core.Security{ public abstract class AttributeAuthorizationHandler<TRequirement, TAttribute> : AuthorizationHandler<TRequirement> where TRequirement : IAuthorizationRequirement where TAttribute : Attribute { Microsoft.AspNetCore.Http.IHttpContextAccessor _httpContextAccessor = null; public AttributeAuthorizationHandler(Microsoft.AspNetCore.Http.IHttpContextAccessor httpContextAccessor) { _httpContextAccessor = httpContextAccessor; } protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, TRequirement requirement) { var attributes = new List<TAttribute>(); var action = (context.Resource as AuthorizationFilterContext)?.ActionDescriptor as ControllerActionDescriptor; if (context.Resource is Microsoft.AspNetCore.Http.Endpoint endpoint) { //endpoint. } if (action != null) { attributes.AddRange(GetAttributes(action.MethodInfo)); } return HandleRequirementAsync(context, requirement, attributes); } protected abstract Task HandleRequirementAsync(AuthorizationHandlerContext context, TRequirement requirement, IEnumerable<TAttribute> attributes); private static IEnumerable<TAttribute> GetAttributes(MemberInfo memberInfo) { return memberInfo.GetCustomAttributes(typeof(TAttribute), false).Cast<TAttribute>(); } }}
4 回答
狐的傳說
TA貢獻1804條經驗 獲得超3個贊
我能夠通過在AuthorizationHandlerContext中使用來獲取 .NET Core 3.1 中的自定義屬性。ControllerActionDescriptor
private IEnumerable<TAttribute> GetAttributes<TAttribute>(AuthorizationHandlerContext authContext)
{
? ? if (authContext.Resource is RouteEndpoint routeEndpoint)
? ? {
? ? ? ? var actionDescriptor = routeEndpoint.Metadata.OfType<ControllerActionDescriptor>().SingleOrDefault();
? ? ? ? var attributes = actionDescriptor?.MethodInfo.GetCustomAttributes(typeof(TAttribute), false).Cast<TAttribute>();
? ? ? ? return attributes;
? ? }
? ??
? ? return null;
}
千巷貓影
TA貢獻1829條經驗 獲得超7個贊
從 .net 5 開始，上下文是HttpContext
有GetEndPoint方法擴展HttpContext
protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, TRequirement requirement)
{
? ? if(context is HttpContext httContext){
? ? ? ? var endpoint = context.GetEndPoint();
? ? } else {
? ? ? ? throw ... // let's see how things will move with next version of .net?
? ? }
}
元芳怎么了
TA貢獻1798條經驗 獲得超7個贊
有一個部分“在處理程序中訪問 MVC 請求上下文”，但這是錯誤的。
然而，在“反饋”下，他們的 2 個問題看起來與最有希望的答案相關，即將下面的代碼添加到AuthorizationHandler.
這可以訪問controllerActionDescriptor，但正如你所看到的，我已經查看了各種屬性，但沒有一個屬性給我當前的路由數據：
var controllerActionDescriptor = routeEndpoint.Metadata
? ? .OfType<ControllerActionDescriptor>()
? ? .SingleOrDefault();
if (controllerActionDescriptor != null)
{
? ? var a = controllerActionDescriptor.AttributeRouteInfo;
? ? var p = controllerActionDescriptor.Parameters;
? ? var ep = controllerActionDescriptor.EndpointMetadata;
? ? var r = controllerActionDescriptor.RouteValues;
}
慕萊塢森
TA貢獻1810條經驗 獲得超4個贊
我找到了解決方案，在ConfigureServices中將IHttpContextAccessor注冊到IOC中
services.AddSingleton<IHttpContextAccessor, HttpContextAccessor>();
然后在AttributeAuthorizationHandler中獲取
public class AccountLoginAuthorizeHandler : AttributeAuthorizationHandler<AccountLoginAuthorizationRequirement, AccountLoginAttribute>
{
private readonly IHttpContextAccessor _httpContextAccessor;
public PermissionAuthorizeHandler(IHttpContextAccessor httpContextAccessor, IZaabeeRedisClient redisClient,
IOptions<LoginConfig> loginConfig)
{
_httpContextAccessor = httpContextAccessor ?? throw new ArgumentNullException(nameof(httpContextAccessor));
}
protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, AccountLoginAuthorizationRequirement requirement, IEnumerable<AccountLoginAttribute> attributes)
{
if (context.Resource is AuthorizationFilterContext filterContext)
{
var httpContext = _httpContextAccessor.HttpContext;
//Do Something
}
else
//Do Something
context.Succeed(requirement);
return Task.CompletedTask;
}
}
- 4 回答
- 0 關注
- 278 瀏覽
添加回答
舉報
0/150
提交
取消