APISIX集成统一鉴权中心

[HttpGet] public async Task Verify() {     try     {         // 1、获取token和请求api
         var token = Request.Headers.FirstOrDefault(d => d.Key == "Authorization").Value.ObjToString().Replace("Bearer ", "");         var questUrl = Request.Headers.FirstOrDefault(d => d.Key == "X-Forwarded-Uri").Value.ObjToString()?.ToLower() ?? "";        
          // 2、配置接口白名单         List<string> apis = Appsettings.app<string>("Middleware", "Apisix", "WhiteApis");         if (apis.Contains(questUrl) || apis.Any(d => questUrl.Contains(d)))         {             // 返回200的HTTP状态码             await ResponseForVerify(HttpStatusCode.OK);             return;         }         
        // 3、token为空，返回401        if (token.Cof_IsNullOrEmpty()) await ResponseForVerify(HttpStatusCode.Unauthorized);                // 解析token，获取内部信息，也可以判断过期时间        var tokenModel = JwtHelper.SerializeJwt(token) ?? new TokenModelJwt();        // 4、当前用户角色是否匹配当前请求的API        var isMatchRole = await IsMatchAPIForCurrentUserRoleAsync(questUrl, currentUserRoles);        if (tokenModel != null && isMatchRole)        {            Console.WriteLine($"鉴权结束时间：{DateTime.Now}-{DateTime.Now.Millisecond}；校验通过，用户id：{tokenModel.Uid}");            await ResponseForVerify(HttpStatusCode.OK);            return;        }

        // 5、不满足上述情况，就返回403        await ResponseForVerify(HttpStatusCode.Unauthorized); }