向ApiKeyAuthorizeAttribute注入IOptions<>

public class ApiKeysOptions
{
    public string Key1 { get; set; }
    public string Key2 { get; set; }
}

{
  "ApiKeys": {
    "Key1": "your-api-key-1",
    "Key2": "your-api-key-2"
  }
}

public void ConfigureServices(IServiceCollection services)
{
    services.Configure<ApiKeysOptions>(Configuration.GetSection("ApiKeys"));
    services.AddControllers();
}

[AttributeUsage(AttributeTargets.Class | AttributeTargets.Method)]
public class ApiKeyAuthorizeAttribute : TypeFilterAttribute
{
    public ApiKeyAuthorizeAttribute() : base(typeof(ApiKeyAuthorizeFilter))
    {
    }

    private class ApiKeyAuthorizeFilter : IAuthorizationFilter
    {
        private readonly ApiKeysOptions _apiKeysOptions;

        public ApiKeyAuthorizeFilter(IOptions<ApiKeysOptions> apiKeysOptions)
        {
            _apiKeysOptions = apiKeysOptions.Value;
        }

        public void OnAuthorization(AuthorizationFilterContext context)
        {
            // 获取请求中的API密钥并进行验证
            var apiKey = context.HttpContext.Request.Headers["X-API-Key"].ToString();

            if (apiKey != _apiKeysOptions.Key1 && apiKey != _apiKeysOptions.Key2)
            {
                context.Result = new UnauthorizedResult();
            }
        }
    }
}

public void ConfigureServices(IServiceCollection services)
{
    var apiKeysSection = Configuration.GetSection("ApiKeys");
    services.Configure<ApiKeysOptions>(apiKeysSection);

    // 添加日志记录
    var apiKeys = apiKeysSection.Get<ApiKeysOptions>();
    Console.WriteLine($"API Keys: Key1={apiKeys.Key1}, Key2={apiKeys.Key2}");

    services.AddControllers();
}