netcore 下的policy授權自定義返回結果


目前一直在用policy做權限校驗,但是好像組里需要將返回結果統一,之前用的都是直接繼承AuthorizationHandler然后調用context.Fail(),但是這樣會導致沒辦法自定義返回結果比如{code:403,msg:'未授權',data:null},

也百度了下https://q.cnblogs.com/q/120091/ 這里也說了3.0后就改掉了之前可以通過result來返回,但是現在不行了,之后又查了下資料無果,今天心血來潮直接用httpcontext來返回結果可以了。。。。。

直接上代碼吧

    public class ApiUrlPermissionHandler : AuthorizationHandler<ApiUrlPermissionRequirement>
    {
        private readonly IHttpContextAccessor _accessor;
        private readonly ILogger<ApiUrlPermissionHandler> _logger;
        private readonly IPermissionWatchDog _permissionWatchDog;

        public ApiUrlPermissionHandler(IHttpContextAccessor accessor,ILogger<ApiUrlPermissionHandler> logger, IPermissionWatchDog permissionWatchDog)
        {
            this._accessor = accessor;
            this._logger = logger;
            this._permissionWatchDog = permissionWatchDog;
        }
        protected override async Task HandleRequirementAsync(AuthorizationHandlerContext context, ApiUrlPermissionRequirement requirement)
        {
            var httpContext = _accessor.HttpContext;

            var isAuthenticated = context.User.Identity.IsAuthenticated;
            if (isAuthenticated)
            {
                var uid = httpContext.User.Claims.FirstOrDefault(s => s.Type == "uid")?.Value;
                if (uid.IsNullOrWhiteSpace())
                {
                    context.Fail();
                    return;
                }
                //判斷是否有權限
                var questUrl = httpContext.Request.Path.Value.ToLower();
                if (!await _permissionWatchDog.PassApiPermAsync(uid, questUrl))
                {
                    context.Fail();
                    return;
                }
                context.Succeed(requirement);
            }
            else
            {
                httpContext.Response.ContentType =  "application/json; charset=UTF-8";
                await httpContext.Response.WriteAsync(JsonConvert.SerializeObject(new { a="123",b="435"}));
                await httpContext.Response.Body.FlushAsync();
                //context.Fail();
            }
        }
    }

  有不對或者更好的方法希望園友提供指出謝謝


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM