如何允许多个角色通过RouteClaimsRequirement路由访问

// Step 2: Create a custom RouteClaimsRequirement class
public class RouteClaimsRequirement : IAuthorizationRequirement
{
    public string ClaimType { get; }
    public string ClaimValue { get; }

    public RouteClaimsRequirement(string claimType, string claimValue)
    {
        ClaimType = claimType;
        ClaimValue = claimValue;
    }
}

// Step 3: Configure authentication and authorization middleware in Startup.cs
public void ConfigureServices(IServiceCollection services)
{
    // Configure authentication middleware
    services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
        .AddJwtBearer(options =>
        {
            // Configure JWT authentication options
        });

    // Configure authorization middleware
    services.AddAuthorization(options =>
    {
        options.AddPolicy("RouteClaimsRequirement", policy =>
            policy.Requirements.Add(new RouteClaimsRequirement("claimType", "claimValue")));
    });

    services.AddSingleton<IAuthorizationHandler, RouteClaimsRequirementHandler>();

    // Other configurations...
}

// Step 4: Use Authorize attribute in controllers or action methods
[Authorize(Policy = "RouteClaimsRequirement")]
public IActionResult SomeAction()
{
    // Action logic...
}