要在ASP.NET Core MVC中进行授权检查,可以按照以下步骤进行操作:
services.AddAuthorization(options =>
{
options.AddPolicy("RequireAdminRole", policy =>
policy.RequireRole("Admin"));
});
[Authorize(Policy = "RequireAdminRole")]
public class AdminController : Controller
{
// ...
}
@using Microsoft.AspNetCore.Authorization
@inject IAuthorizationService AuthorizationService
@if ((await AuthorizationService.AuthorizeAsync(User, "RequireAdminRole")).Succeeded)
{
只有管理员可以看到这个内容。
}
通过上述步骤,你可以在ASP.NET Core MVC中进行授权检查。只有具有"Admin"角色的用户才能访问被授权的Controller和View。