如何给Blazor.Server加个API鉴权？

@page "/fetchdata"@attribute [Authorize(Roles = "Admin")]

<AuthorizeView Roles="User">    <p>You can only see this if you're in the User role.</p></AuthorizeView>
<AuthorizeView Roles="Admin">    <p>You can only see this if you're in the Admin role.</p></AuthorizeView>

  <div>      <div class="form-group">          <label>令牌</label>          <input @bind="BlogArticle.Token" class="form-control" />      </div>      <div class="form-group">          <label>标题</label>          <input @bind="BlogArticle.btitle" class="form-control" />      </div>      <div class="form-group">          <label>分类</label>          <input @bind="BlogArticle.bcategory" class="form-control" />      </div>      <div class="form-group">          <label>外链</label>          <input @bind="BlogArticle.bsubmitter" class="form-control" />      </div>      <div class="form-group">          <label>副标题</label>          <input @bind="BlogArticle.bcontent" class="form-control" />      </div>      <div class="form-group">          <label>阅读</label>          <input @bind="BlogArticle.btraffic" class="form-control" />      </div>
      <button class="btn btn-primary" @onclick="TrySave">          保存      </button>
      <CancelBtn Name="取消"></CancelBtn>  </div>

 private async Task OnSaveAsync(BlogArticle blogArticle) {     BlogArticle = blogArticle;
     // 通过双向绑定，从子组件中获取token，并添加到Header中     Http.DefaultRequestHeaders.Add("Authorization", $"Bearer {BlogArticle.Token}");     var result = await Http.PostAsJsonAsync("http://apk.neters.club/api/Blog/AddForMVP", BlogArticle);
     if (result.IsSuccessStatusCode)     {         NavManager.NavigateTo("/blog/list");     }     else     {         // 如果失败了，必须刷新页面，因为这个时候HttpClient已经失效了         _errmsg = "保存失败! 错误原因：" + result.ReasonPhrase + "。请刷新页面重试";     } }

services.AddTransient<HttpClient>();