PasteSpider之接口的授权实现为什么不采用JWT方式

    /// <summary>
    /// 这里的权限筛选器
    /// </summary>
    public class RoleAttribute : ActionFilterAttribute
    {
        /// <summary>
        /// 权限
        /// </summary>
        private string _role { set; get; }

        /// <summary>
        /// 角色
        /// </summary>
        private string _model { get; set; }

        /// <summary>
        /// 
        /// </summary>
        private readonly ModelHelper _appCache;

        /// <summary>
        /// 
        /// </summary>
        /// <param name="appcache"></param>
        /// <param name="Model"></param>
        /// <param name="Role"></param>
        public RoleAttribute(
            ModelHelper appcache,
            string Model = default,
            string Role = default
            )
        {
            _role = Role;
            _model = Model;
            _appCache = appcache;
        }

        /// <summary>
        /// 
        /// </summary>
        /// <param name="context"></param>
        /// <exception cref="SmartToolException"></exception>
        public override void OnActionExecuting(ActionExecutingContext context)
        {
            var needauth = true;
            foreach (var item in context.Filters)
            {
               // Console.WriteLine(item.ToString()); 可以看看有多少过滤器被注入了
                if (item is AllowAnonymousAttribute)
                {
                    needauth = false;
                    break;
                }
                if (item is RoleAttribute)
                {
                    needauth = (item == this);
                }
            }
            if (needauth)
            {
                //authorization
                if (context.HttpContext.Request.Headers[PublicString.TokenHeadName].Count == 0)
                {
                    throw new SmartToolException("当前未登录，请登录后重试", "401");
                }
                var token = context.HttpContext.Request.Headers[PublicString.TokenHeadName].ToString();
                if (token.StartsWith("Bearer"))
                {
                    token = token.Replace("Bearer ", "");
                }

                //// 获得当前用户信息后 如果要使用base.CurrentUser.的属性，下面要按需注入
                //var list = new System.Security.Claims.ClaimsIdentity();
                //list.AddClaim(new System.Security.Claims.Claim("editionid", "张三"));//EditionId 
                //list.AddClaim(new System.Security.Claims.Claim("client_id", token)); //ClientId
                //list.AddClaim(new System.Security.Claims.Claim("tenantid", token));//TenantId 
                //list.AddClaim(new System.Security.Claims.Claim(ClaimTypes.Name, token));//TenantId 
                //var _guid_userid = Guid.NewGuid().ToString();
                //Console.WriteLine(_guid_userid);
                //list.AddClaim(new System.Security.Claims.Claim(AbpClaimTypes.UserId, _guid_userid));
                //context.HttpContext.User = new System.Security.Claims.ClaimsPrincipal(list);

                //这里可以做token的安全校验
                if (!String.IsNullOrEmpty(token))
                {
                    //if (token.CheckToken())
                    //{
                    var back = _appCache.HasRole(_model, _role, token);
                    if (!back.role)
                    {
                        throw new SmartToolException($"{(back.code == 401 ? "当前登录密钥失效，请重新登录" : "没有当前接口的操作权限，请确认")}", $"{back.code}");
                    }
                    //}
                    //else
                    //{
                    //    throw new SmartToolException("当前密钥信息有误，请登录后重试", "401");
                    //}
                }
                else
                {
                    throw new SmartToolException("当前密钥信息有误，请登录后重试", "401");
                }
            }
            base.OnActionExecuting(context);
        }
    }