如何将 HttpAuthenticationContext.Errorcontext 设置为未经授权

Question

我正在尝试学习本教程：http://bitoftech.net/2014/12/15/secure-asp-net-web-api-using-api-key-authentication-hmac-authentication/

关于如何使用 HMAC 保护 webapi。它在教程代码中的某处提供：

  public Task AuthenticateAsync(HttpAuthenticationContext context, CancellationToken cancellationToken)
    {
        var req = context.Request;

        if (req.Headers.Authorization != null && authenticationScheme.Equals(req.Headers.Authorization.Scheme, StringComparison.OrdinalIgnoreCase))
        {
            var rawAuthzHeader = req.Headers.Authorization.Parameter;

            var autherizationHeaderArray = GetAutherizationHeaderValues(rawAuthzHeader);

            if (autherizationHeaderArray != null)
            {
                var APPId = autherizationHeaderArray[0];
                var incomingBase64Signature = autherizationHeaderArray[1];
                var nonce = autherizationHeaderArray[2];
                var requestTimeStamp = autherizationHeaderArray[3];

                var isValid = isValidRequest(req, APPId, incomingBase64Signature, nonce, requestTimeStamp);

                if (isValid.Result)
                {
                    var currentPrincipal = new GenericPrincipal(new GenericIdentity(APPId), null);
                    context.Principal = currentPrincipal;
                }
                else
                {
                    context.ErrorResult = new UnauthorizedResult(new AuthenticationHeaderValue[0], context.Request);
                }
            }
            else
            {
                context.ErrorResult = new UnauthorizedResult(new AuthenticationHeaderValue[0], context.Request);
            }
        }
        else
        {
            context.ErrorResult = new UnauthorizedResult(new AuthenticationHeaderValue[0], context.Request);
        }

        return Task.FromResult(0);
    }

我当然复制了它，但是 mvc 不知道这些参数的任何未经授权的结果。所以这一行给出了一个错误：context.ErrorResult = new UnauthorizedResult(new AuthenticationHeaderValue[0], context.Request);

我不知道如何返回正确的结果。有人知道吗？

Answer 1

我使用了错误的命名空间。应该是using System.Web.Http.Results;