WebApi Basic Auth认证

第一步、新建AuthFilterAttribute类

 public class AuthFilterAttribute : AuthorizeAttribute
    {
        public override void OnAuthorization(HttpActionContext actionContext)
        {
            //如果用户方位的Action带有AllowAnonymousAttribute，则不进行授权验证
            if (actionContext.ActionDescriptor.GetCustomAttributes<AllowAnonymousAttribute>().Any())
            {
                return;
            }
            if (actionContext.Request.Headers.Authorization != null)
            {
                string userInfo = Encoding.Default.GetString(Convert.FromBase64String(actionContext.Request.Headers.Authorization.Parameter));
                //用户验证逻辑
                if (string.Equals(userInfo, string.Format("{0}:{1}", "Parry", "123456")))
                {
                    IsAuthorized(actionContext);
                }
                else
                {
                 HandleUnauthorizedRequest(actionContext);
                }
            }
            else
            {
               HandleUnauthorizedRequest(actionContext);
            }
        }
       
    }

第二步、注册全局Filter

在WebApiConfig类中添加以下代码

//注册全局Filter
config.Filters.Add(new AuthFilterAttribute());

第三步、客户端验证

1.通过NuGet方便引入到任何项目 ( Install-Package restsharp )

2.客户端代码

var client = new RestClient("http://192.168.0.102:8003/API/Order/get");
var request = new RestRequest(Method.GET);
request.AddHeader("Postman-Token", "b5cb9faf-e1f1-484c-b14a-5f90af60a074");
request.AddHeader("Cache-Control", "no-cache");
request.AddHeader("Authorization", "Basic UGFycnk6MTIzNDU2");
IRestResponse response = client.Execute(request);