znyc.recruitment.api/src/Znyc.Recruitment.Api/Attributes/QuartzAttribute.cs

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Mvc.Filters;
using Microsoft.Extensions.DependencyInjection;
using System;
using System.Linq;
using System.Threading.Tasks;
using Znyc.Recruitment.Api.Auth;

namespace Znyc.Recruitment.Attributes
{
    /// <summary>
    ///     定时任务启动密钥
    /// </summary>
    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = true)]
    public class QuartzAttribute : AuthorizeAttribute, IAuthorizationFilter, IAsyncAuthorizationFilter
    {
        private IApiHandler _apiHandler;

        public Task OnAuthorizationAsync(AuthorizationFilterContext context)
        {
            OnAuthorization(context);
            return Task.CompletedTask;
        }

        public async void OnAuthorization(AuthorizationFilterContext context)
        {
            //排除匿名访问
            if (context.ActionDescriptor.EndpointMetadata.Any(m => m.GetType() == typeof(AllowAnonymousAttribute)))
            {
                return;
            }

            string apiUrl = context.HttpContext.Request.Path.Value;
            _apiHandler = context.HttpContext.RequestServices.GetService<IApiHandler>();
            Model.ApiEntity entity = await _apiHandler.ValidateAsync(apiUrl);
            //key/value 存入数据库去查询，不同的api对应不同的key/value
            string authHeader = context.HttpContext.Request.Headers[entity.AuthKey];
            if (authHeader != null && authHeader.Equals(entity.AuthValue))
            {
                return;
            }

            context.Result = new StatusCodeResult(StatusCodes.Status401Unauthorized);
        }

        public void OnAuthorizationTest(AuthorizationFilterContext context)
        {
            //key/value 存入数据库去查询，不同的api对应不同的key/value
            string authHeader = context.HttpContext.Request.Headers["Authorization"];
            if (authHeader != null && authHeader.StartsWith("Quartz"))
            {
                if (authHeader.Equals("Quartz 5r59#ioFJLQ@Pye6"))
                {
                    return;
                }

                context.Result = new StatusCodeResult(StatusCodes.Status401Unauthorized);
            }
            else
            {
                context.Result = new StatusCodeResult(StatusCodes.Status401Unauthorized);
            }
        }
    }
}