权限控制

        [Route("api/[controller]/[action]")]  
        [ApiController]  
        [Authorize()] //加在控制器，控制器内所有方法需登录访问        
        public class AreaController : MyBaseController  
        {
            IAreaBll bll{geet;set;};  
            [HttpGet]  
            public Result List([FromQuery] Dictionary<string, string> where)  
            {  
                return Result.Success("succeed").SetData(bll.Query(where));  
            }      
        }  

		[Route("api/[controller]/[action]")]  
		[ApiController]  	  	 
		public class AreaController : MyBaseController  
		{  
		    IAreaBll bll{geet;set;};  
		    [HttpGet]    
			[Authorize()] //加在操作方法，某个方法需登录访问            
		    public Result List([FromQuery] Dictionary<string, string> where)  
		    {   
		        return Result.Success("succeed").SetData(bll.Query(where));  
		    }      
		}  

        //加在控制器，控制器内所有方法需登录访问   
        [Route("api/[controller]/[action]")]   
        [ApiController]   
        [Authorize("admin")]    //策略为admin才能访问   
        public class AreaController : MyBaseController   
        {   
            IAreaBll bll{geet;set;};    
            [HttpGet]   
            public Result List([FromQuery] Dictionary<string, string> where)   
            {   
                return Result.Success("succeed").SetData(bll.Query(where));   
            }           
        }   

      services.AddAuthorization(options =>        
      {      
		//AddPolicy("admin" 自定义策略名称         
		//policy => policy.RequireRole("admin")策略要求角色，一个策略可以有多个角色    
        options.AddPolicy("admin", policy => policy.RequireRole("admin").Build());    
        options.AddPolicy("teacher", policy => policy.RequireRole("teacher","admin").Build());    
        options.AddPolicy("student", policy => policy.RequireRole("student").Build());    
      });    
      #endregion 

    public class DefaultController : MyBaseController     
      {              
        [HttpPost("login")]             
        public Result Login(Userinfo o)     
        //public Result Login([FromForm]string username, [FromForm]string password,[FromForm]string type="student")            
        {      
            ……          
            if (obj != null)        
            {       
                type = o.Type;       
                var t = new Token() { Uid = obj.Id, Uname = obj.Username, Role = obj.Role, Type = type, TokenType = TokenType.App, Project = project,ClasssId= classid,SchoolId = schoolid };           
                return Result.Success("登录成功")          
                    .SetData(new Userinfo() { Id = obj.Id, Username = obj.Username, Avatar = obj.Photo, Role = obj.Role, Type = o.Type, Realname = obj.Realname, Tel = obj.Tel, Email = obj.Email, Birthday = obj.Birthday, Token = JwtHelper.IssueJWT(t, this.jwtConfig) });                            
            }      
            return Result.Error("登录失败,用户名密码错误").SetData(new Userinfo() { Token = "" });     
        }    
	  }