.NET6自定义WebAPI过滤器_实用技巧_

 /// 
 /// API白名单过滤器 /// 
 public class APIFilter : ActionFilterAttribute { /// 
 /// 控制器中加了该属性的方法中代码执行之前该方法。 /// 所以可以用做权限校验。 /// 
 ///  public override void OnActionExecuting(ActionExecutingContext context) { var vistorIp = context.HttpContext.Connection.RemoteIpAddress.ToString_(); var whiteIp = AppsettingHelper.Get("WhiteIP"); if (!string.IsNullOrEmpty(whiteIp)) { List whiteIpList = whiteIp.Split(',').ToList(); if (!whiteIpList.Contains("*") && !whiteIpList.Contains(vistorIp)) { context.HttpContext.Response.StatusCode = 401; context.Result = new JsonResult(new { code = 401, msg = "非法IP" }); } } base.OnActionExecuting(context); } /// 
 /// 控制器中加了该属性的方法执行完成后才会来执行该方法。 /// 
 ///  public override void OnActionExecuted(ActionExecutedContext context) { base.OnActionExecuted(context); } /// 
 /// 控制器中加了该属性的方法执行完成后才会来执行该方法。比OnActionExecuted()方法还晚执行。 /// 
 ///  ///  ///  public override Task OnResultExecutionAsync(ResultExecutingContext context, ResultExecutionDelegate next) { return base.OnResultExecutionAsync(context, next); } }

 [Route("api/[controller]/[action]")] [ApiController] [APIFilter] public class YangController : BaseController