在进入实际函数之前,强制WCF在每个请求上调用方法

public class CustomAuthorizationAttribute : Attribute, IOperationBehavior
{
    public void AddBindingParameters(OperationDescription operationDescription, BindingParameterCollection bindingParameters)
    {
    }

    public void ApplyClientBehavior(OperationDescription operationDescription, ClientOperation clientOperation)
    {
    }

    public void ApplyDispatchBehavior(OperationDescription operationDescription, DispatchOperation dispatchOperation)
    {
        dispatchOperation.Invoker = new CustomAuthorizationInvoker(dispatchOperation.Invoker);
    }

    public void Validate(OperationDescription operationDescription)
    {
    }
}

public class CustomAuthorizationInvoker : IOperationInvoker
{
    private readonly IOperationInvoker _innerInvoker;

    public CustomAuthorizationInvoker(IOperationInvoker innerInvoker)
    {
        _innerInvoker = innerInvoker;
    }

    public object[] AllocateInputs()
    {
        return _innerInvoker.AllocateInputs();
    }

    public object Invoke(object instance, object[] inputs, out object[] outputs)
    {
        // Perform custom authorization check here

        return _innerInvoker.Invoke(instance, inputs, out outputs);
    }

    public IAsyncResult InvokeBegin(object instance, object[] inputs, AsyncCallback callback, object state)
    {
        return _innerInvoker.InvokeBegin(instance, inputs, callback, state);
    }

    public object InvokeEnd(object instance, out object[] outputs, IAsyncResult result)
    {
        return _innerInvoker.InvokeEnd(instance, out outputs, result);
    }

    public bool IsSynchronous
    {
        get { return _innerInvoker.IsSynchronous; }
    }
}

 <services>
   <service name="MyService">
     <endpoint address="http://localhost:8000/MyService" binding="basicHttpBinding" contract="IMyService" />
      <host>
        <baseAddresses>
          <add baseAddress="http://localhost:8000/MyService" />
        </baseAddresses>
      </host>
    </service>
  </services>
  <behaviors>
   <serviceBehaviors>
      <behavior>
       <serviceAuthorization serviceAuthorizationManagerType="CustomAuthorizationManager" />
       <serviceMetadata httpGetEnabled="true" />
      </behavior>
    </serviceBehaviors>
  </behaviors>
</system.serviceModel>