1         public override async Task OnAuthorizationAsync(AuthorizationFilterContext context)
 2         {
 3             await base.OnAuthorizationAsync(context);
 4 
 5             var descriptor = context.ActionDescriptor as ControllerActionDescriptor;
 6 
 7             //判断是否跳过授权过滤器
 8             if (descriptor.MethodInfo.GetCustomAttributes<AllowAnonymousAttribute>().Any())
 9             {
10                 //return;
11             }
12           
13             if (descriptor.MethodInfo.IsDefined(typeof(AllowAnonymousAttribute), true))
14             {
15                 //return;
16             }
17 
18             if (!context.HttpContext.User.Identity.IsAuthenticated) 
19             {
20                 context.Result = Unauthorized();
21                 return; 
22             }
23 
24             //do something
25         }

GetCustomAttributes（）