在ASP.NET核心Web API中获取作为List<string>的角色列表

<ItemGroup>
  <PackageReference Include="Microsoft.AspNetCore.Authorization" Version="5.0.0" />
</ItemGroup>

[ApiController]
[Route("api/[controller]")]
public class RoleController : ControllerBase
{
    [HttpGet]
    [Authorize(Roles = "admin")] // 只允许 "admin" 角色的用户访问
    public IActionResult GetRoles()
    {
        // 这里可以获取角色列表的逻辑
        List<string> roles = new List<string>{"role1", "role2", "role3"};
        return Ok(roles);
    }
}

[HttpGet]
[Authorize(Roles = "admin")]
public IActionResult GetRoles()
{
    List<string> roles = new List<string>();
    foreach (var claim in HttpContext.User.Claims)
    {
        if (claim.Type == ClaimTypes.Role)
        {
            roles.Add(claim.Value);
        }
    }
    return Ok(roles);
}