如何在ASP.NET Core2中访问当前的HttpContext使用AuthorizationHandlerContext的自定义策略授权

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            ValidateIssuerSigningKey = true,
            ValidIssuer = "your-issuer",
            ValidAudience = "your-audience",
            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("your-secret-key"))
        };
    });

services.AddAuthorization(options =>
{
    options.AddPolicy("CustomPolicy", policy =>
    {
        policy.Requirements.Add(new CustomRequirement());
    });
});

public class CustomRequirement : IAuthorizationRequirement
{
    // 可以在这里添加任何必要的属性或方法
}

public class CustomAuthorizationHandler : AuthorizationHandler<CustomRequirement>
{
    private readonly IHttpContextAccessor _httpContextAccessor;

    public CustomAuthorizationHandler(IHttpContextAccessor httpContextAccessor)
    {
        _httpContextAccessor = httpContextAccessor;
    }

    protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, CustomRequirement requirement)
    {
        var httpContext = _httpContextAccessor.HttpContext;

        // 在这里可以访问当前的HttpContext，并根据需要进行授权逻辑

        if (/* 授权通过 */)
        {
            context.Succeed(requirement);
        }

        return Task.CompletedTask;
    }
}

services.AddSingleton<IAuthorizationHandler, CustomAuthorizationHandler>();
services.AddSingleton<IHttpContextAccessor, HttpContextAccessor>();

[Authorize(Policy = "CustomPolicy")]
public IActionResult SecureAction()
{
    // 在这里可以确保访问此方法的用户已经通过自定义策略授权

    return Ok();
}