ApiController实现自定义身份认证

/// <summary>
    /// 身份认证
    /// </summary>
    public class AuthAttribute : AuthorizationFilterAttribute
    {
        /// <summary>
        /// 重写认证过程
        /// </summary>
        /// <param name="actionContext"></param>
        public override void OnAuthorization(HttpActionContext actionContext)
        {
            HttpResponseMessage message = new HttpResponseMessage();
            message.StatusCode = System.Net.HttpStatusCode.OK;

            var TokenQuery = actionContext.Request.GetQueryNameValuePairs().ToList().Where(m => m.Key == "api_key").FirstOrDefault();
            if (string.IsNullOrEmpty(TokenQuery.Value))
            {
                string json = JsonConvert.SerializeObject(new ReturnModel() { RetCode = 200, Data = { }, Msg = "token认证失败" });
                StringContent Content = new StringContent(json, Encoding.GetEncoding("UTF-8"), "application/json");
                message.Content = Content;

                actionContext.Response = message;
                return;
            }
            //数据库查询方法
            //...
        }
    }