身份验证 – 动态添加角色以授权ASP.NET 5中的控制器属性

public class CustomRoleRequirement : AuthorizationHandler<CustomRoleRequirement>,IAuthorizationRequirement
{
    protected override void Handle(Microsoft.AspNet.Authorization.AuthorizationContext context,CustomRoleRequirement requirement)
    {
        var roles = new[] { "Admin","Admin2","Admin3" };  //Get From DB.
        var userIsInRole = roles.Any(role => context.User.IsInRole(role));
        if (!userIsInRole)
        {
            context.Fail();
            return;
        }

        context.Succeed(requirement);
    }
}

并在startup.cs中的ConfigureServices方法中

services.ConfigureAuthorization(options =>{
    options.AddPolicy("CustomRole",policy => policy.AddRequirements(new CustomRoleRequirement()));
});

你需要像这样在控制器中提供autorize属性.

[Authorize(Policy = "CustomRole")]

资料来源：https://forums.asp.net/post/5975557.aspx

希望能帮助到你.