/// <summary>

        /// 管理用户列表

        /// </summary>

        /// <param name="req">查询条件</param>

        /// <param name="token">登录令牌</param>

        /// <returns></returns>

        [HttpGet("userlist")]

        [CustomAuthorize(Roles = "001,002,999")]

        public CrmManageUserListResp CrmManageUserList([FromQuery] CrmManageUserListReq req, [FromHeader] [Required] string token)

        {

            return _DoInvoke(req, _userService.CrmManageUserList);

        }

using GeduData.Server;

using Microsoft.AspNetCore.Mvc.Filters;

using System.Threading.Tasks;

namespace GeduDistributionApi.Extension

{

    public class CustomAuthorizeAttribute : ActionFilterAttribute

    {

        public string Roles { get; set; }

        public override Task OnActionExecutionAsync(ActionExecutingContext context, ActionExecutionDelegate next)

        {

            Microsoft.AspNetCore.Http.HttpRequest request = context.HttpContext.Request;

            string token = request.Headers["token"].ToString();

            //拿到用户信息，匹配角色是否可以访问

            string defailtrole = "";

            if (Roles.Contains(defailtrole) == false)

            {

                throw new GeduException("暂无访问权限");

            }

            return base.OnActionExecutionAsync(context, next);

        }

    }

}