2017-01-13 8 views
-1

この件に関して多くの記事(SOを含む)を読みましたが、依然としてAuthorizationFilterAttributeのNinjectによる依存性注入の適切な解決策が見つかりません。現在のコードは動作していますが、もっと良い解決策があるはずです。 NinjectWebCommon.RegisterServicesでカスタムのAuthorizationFilterAttributeでDIを

Ninject.Web.WebApi.FilterBindingSyntax.BindingRootExtensions 
     .BindHttpFilter<SomeAuthorisationFilter>(kernel, 
      Http.Filters.FilterScope.Global) 

(のiKernel):

public override void OnAuthorization(HttpActionContext actionContext) 
    { 
     var ts = GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(TokenService)); 
     try 
      { 
       var token = GetHeader(actionContext.Request); 
       if (token == null) 
       { 
        actionContext.Response = new HttpResponseMessage(HttpStatusCode.Unauthorized) 
        { 
         Content = new StringContent("Token not found") 
        }; 
        return; 
       } 
       else 
       { 
        var tks = ts as TokenService; 
        var tkn = Task.Run(() => tks.FindToken(token)).Result; 
        if (tkn.ValidTill > DateTime.Now) 
        { 
         var us = GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(UserService)); 
         var uss = us as UserService; 
         var user = Task.Run(() => uss.FindByTokenValue(token)).Result; 
         if (user != null) 
         { 
          if (!_roles.Contains(user.RoleName)) 
          { 
           actionContext.Response = new HttpResponseMessage(HttpStatusCode.Forbidden) 
           { 
            Content = new StringContent("You role permission is not enough") 
           }; 
           return; 
          } 
          var identity = new Identity { Name = user.Login, IsAuthenticated = true }; 
          var principal = new GenericPrincipal(identity, new[] { user.RoleName }); 
          actionContext.RequestContext.Principal = principal; 
          Thread.CurrentPrincipal = principal; 
          base.OnAuthorization(actionContext); 
          _roles = null; 
         } 
         else 
         { 
          actionContext.Response = new HttpResponseMessage(HttpStatusCode.Unauthorized) 
          { 
           Content = new StringContent("User not found") 
          }; 
          return; 
         } 
        } 
        else 
        { 
         actionContext.Response = new HttpResponseMessage(HttpStatusCode.Unauthorized) 
         { 
          Content = new StringContent($"Token valid till {tkn.ValidTill}") 
         }; 
         return; 
        } 
       } 
      } 
      catch (Exception ex) 
      { 
       actionContext.Response = new HttpResponseMessage(HttpStatusCode.Unauthorized) 
       { 
        Content = new StringContent($"Authorization error: {ex.Message}") 
       }; 
       return; 
      } 
     } 

答えて