问SignalR不允许在方法中使用Autorize

EN

       services.AddMvc();
       ...
        services.AddCors(o => o.AddPolicy("CorsPolicy", builder =>
        {
            builder
            .AllowAnyMethod()
            .AllowAnyHeader()
            .AllowAnyOrigin()
            .AllowCredentials();
        }));

        //services.AddSignalR();
        services.AddSignalR(hubOptions =>
        {
            hubOptions.EnableDetailedErrors = true;
        });
        ...
services.AddDefaultIdentity<Account>(opt =>
        {
            opt.Password.RequiredUniqueChars = 1;
            opt.Password.RequireNonAlphanumeric = false;
            opt.Password.RequireLowercase = false;
            opt.Password.RequireDigit = false;
            opt.Password.RequireUppercase = false;
            opt.Password.RequiredLength = Account.MinPasswordLength;

            opt.Lockout.AllowedForNewUsers = false;

            opt.ClaimsIdentity.UserNameClaimType = OpenIdConnectConstants.Claims.Name;
            opt.ClaimsIdentity.UserIdClaimType = OpenIdConnectConstants.Claims.Subject;
            opt.ClaimsIdentity.RoleClaimType = OpenIdConnectConstants.Claims.Role;
        })
        .AddUserManager<AccountManager>()
        .AddRoles<AccountRole>()
        .AddEntityFrameworkStores<ApplicationContext>()
        .AddDefaultTokenProviders();

        services.AddOpenIddict()
          .AddCore(opt =>
          {
              opt.UseEntityFrameworkCore()
                 .UseDbContext<ApplicationContext>();
          })
          .AddServer(opt =>
          {
              opt.SetAccessTokenLifetime(TimeSpan.FromMinutes(5));
              opt.UseMvc();
              opt.AllowCustomFlow(WebConstants.AdminGrantType)
                 .EnableTokenEndpoint("/api/common/auth/Token")
                 .AllowRefreshTokenFlow()
                 .DisableHttpsRequirement()
                 .AcceptAnonymousClients();
          });

        services.AddAuthentication()
            .AddOAuthValidation(options =>
            {
                options.Events.OnRetrieveToken = context =>
                {
                    context.Token = context.Request.Query["access_token"];
                    return Task.CompletedTask;
                };
            });

 app.UseCors("CorsPolicy");
            app.UseAuthentication();

            app.UseSignalR(routes =>
            {
                routes.MapHub<SomeHub >("/someHub");
            });

public class AuthAccountTypeAttribute : AuthorizeAttribute
{
    public AuthAccountTypeAttribute(params AccountType[] accountType)
    {
        if (accountType.Any())
        {
            Roles = string.Join(',', accountType.Select(x => x.ToString()));
        }
        AuthenticationSchemes = OAuthValidationDefaults.AuthenticationScheme;
    }
}

[AuthAccountType(AccountType.Admin)]
public class SomeHub : Hub
{
    private readonly AccountManager _accountManager;
    private readonly IUnitOfWork _unitOfWork;


    public SomeHub (AccountManager accountManager, IUnitOfWork unitOfWork)
    {
        _accountManager = accountManager;
        _unitOfWork = unitOfWork;
    }

    public override Task OnConnectedAsync()
    {
        return base.OnConnectedAsync();
    }

    public async Task OnConnectSmth()
    {

    }

[AuthAccountType(AccountType.Admin)]
public async Task OnConnectSmth()
{

}

[Authorize(AuthenticationSchemes = OAuthValidationDefaults.AuthenticationScheme)]