.NET 8 API端点安全配置（独立控制器类场景）

开发者阿泽

2026-6-29

求助：独立API控制器的身份验证授权配置不生效

我已按照微软官方文档配置ASP.NET Core的身份验证与授权，但当API端点放在独立的控制器类中时，这套配置方案无法解决我的问题，麻烦大家帮忙看看。

控制器代码示例

namespace CompetencyApp.Api.Controllers
{
    [Route("api/[controller]")]
    [ApiController]
    
    public class EmployeeController : Controller
    {
        private readonly IEmployeeRepository _employeeRepository;
        private readonly IWebHostEnvironment _webHostEnvironment;
        private readonly IHttpContextAccessor _httpContextAccessor;
        
        public EmployeeController(IEmployeeRepository employeeRepository, IWebHostEnvironment webHostEnvironment, IHttpContextAccessor httpContextAccessor)
        {
            _employeeRepository = employeeRepository;
            _webHostEnvironment = webHostEnvironment;
            _httpContextAccessor = httpContextAccessor;
        }
        
        [HttpGet]
        public IActionResult GetAllEmployees()
        {
            return Ok(_employeeRepository.GetAllEmployees());
        }
    }