如何在基于属性的MVC授权中使用特定于请求的信息？

// Step 1: 创建自定义授权策略类
public class CustomRequirement : IAuthorizationRequirement
{
    // 定义授权所需的属性和方法
    // ...
}

// Step 2: 创建自定义授权处理程序
public class CustomHandler : AuthorizationHandler<CustomRequirement>
{
    protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, CustomRequirement requirement)
    {
        // 获取特定的请求信息
        var httpContext = context.Resource as HttpContext;
        var request = httpContext.Request;
        var url = request.Path;
        var method = request.Method;

        // 根据特定的请求信息进行授权判断
        if (url.StartsWith("/admin") && method == "GET")
        {
            context.Succeed(requirement);
        }

        return Task.CompletedTask;
    }
}

// Step 3: 注册授权策略
public void ConfigureServices(IServiceCollection services)
{
    services.AddAuthorization(options =>
    {
        options.AddPolicy("CustomPolicy", policy =>
            policy.Requirements.Add(new CustomRequirement()));
    });

    services.AddSingleton<IAuthorizationHandler, CustomHandler>();
}

// Step 4: 应用授权策略
[Authorize(Policy = "CustomPolicy")]
public class AdminController : Controller
{
    // ...
}