问使用操作的自定义身份验证/授权属性

EN

public class PinAuthorizeAttribute : AuthorizeAttribute
{
    private readonly string _password;

    public PinAuthorizeAttribute(string password)
    {
        _password = password;
    }
    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        //Check if user has entered the correct PIN, perhaps
        //by keeping the PIN in the Session
        if(Session["PIN") == _password)
            return true;

        return false;
    }
}

[PinAuthorize("1234")]
public ActionResult ProtectedIndex()
{ 
    //snip
}