Mastering ASP.NET Web API

Authorization filter

These filters control the access to action methods or controllers. They are the first to get executed in the filter pipeline. Once the Authorization filter is authorized, other filters get executed.

Create ProductsController in the web API project, the following code snippet added the Authorize attribute at controller level. It indicates that any action methods cannot be accessed unless authorized.

The Get() method is decorated with the AllowAnonymous attribute; it allows to access the action method:

 using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Mvc; using System; namespace filters_demo.Controllers { [Route("api/[controller]")] [Authorize] public class ProductsController : Controller { // GET: ...