How can I develop a custom AuthorizeAttribute that accepts a login OR a token?
问题 In my MVC 5 application, I decorate my controllers as follows: [Authorize] public class Controller { .. However, one requirement I have is to use a token to authorize an action without going to the login screen. ie: http://{website}/Action?token={/* token for this user */} Thus, how can I develop a custom AuthorizeAttribute that accepts a login (default behavior) OR a token (custom, required behavior)? In other words, if I use http://{website}/Action , I would be redirected to the login