PROSAGA码农传奇-策略引擎-将策略应用于asp.net核心应用程序中的路径

<div class =“post-text”itemprop =“text”>
  <P>
    AFAIK，没有这样的配置启用策略的路径过滤器。作为解决方法，您可以为覆盖Controller的该区域创建基本控制器定义，并将安全性要求添加到：
  </p>
   <pre>
    <code>
      [Authorize(Policy = "RequireElevatedRights")]
public abstract class AdminController : Controller { }

</code>
  </pre>
  <P>
    然后你只需要确保该区域中的每个控制器都覆盖AdminController而不是Controller：
  </p>
   <pre>
    <code>
      [Area("Admin")]
public class HomeController : AdminController
{
    public IActionResult Index()
    {
        return View();
    }
}

</code>
  </pre>
  <P>
    另一种解决方案是应用全局授权要求：
  </p>
   <pre>
    <code>
      services.AddMvc(config =>
{

config.Filters.Add(new AuthorizeFilter("AtLeast21"));
}).SetCompatibilityVersion(CompatibilityVersion.Version_2_1);

services.AddAuthorization(options =>
{

options.AddPolicy("AtLeast21", policy =>
policy.Requirements.Add(new MinimumAgeRequirement(21)));
});

services.AddHttpContextAccessor();
services.AddSingleton<IAuthorizationHandler, MinimumAgeHandler>();

</code>
  </pre>
  <P>
    在句柄中你应该检查该区域是否是特定区域：
  </p>
   <pre>
    <code>
      IHttpContextAccessor _httpContextAccessor = null;

public MinimumAgeHandler(IHttpContextAccessor httpContextAccessor)
{
    _httpContextAccessor = httpContextAccessor;
}

protected override Task HandleRequirementAsync(AuthorizationHandlerContext context,                                                       MinimumAgeRequirement requirement)
{
    var mvcContext = context.Resource as AuthorizationFilterContext;
    var descriptor = mvcContext?.ActionDescriptor as ControllerActionDescriptor;
    if (!("Admin".Equals(descriptor.RouteValues["area"])))
    {
        context.Succeed(requirement);
    }
    ...........
}

</code>
  </pre>
</DIV>