自定义授权属性或基于策略的授权处理程序

Question

I should check the custom header is present eg:["apikey"] and then check in the database thatgiven key is present. if not present return unauthorized. should i use authorization attribute or policy based authorization handler?

Answer 1

Rather than authorization handler, I find custom authentication handler is a better approach for this scenario and implemented the same.