将连接字符串传递给asp.net核心中的自定义AuthorizeAttribute

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc.Filters;
using Microsoft.Extensions.Configuration;
using System.Data.SqlClient;

public class CustomAuthorizeAttribute : AuthorizeAttribute, IAuthorizationFilter
{
    private readonly string _connectionString;

    public CustomAuthorizeAttribute(string connectionString)
    {
        _connectionString = connectionString;
    }

    public void OnAuthorization(AuthorizationFilterContext context)
    {
        // 建立数据库连接
        using (SqlConnection connection = new SqlConnection(_connectionString))
        {
            // 执行数据库查询并验证用户的身份和权限
            // 这里仅作为示例，具体的逻辑需根据实际需求进行实现
        }

        // 如果验证不通过，可以通过以下方式返回未授权的结果：
        // context.Result = new UnauthorizedResult();
    }
}

[CustomAuthorize("连接字符串")]
public class HomeController : Controller
{
    // 控制器的逻辑代码
}