WebAPI的AuthorizeAttribute扩展类中获取POST提交的数据

在WEBAPI中，AuthorizeAttribute类重写时，如何获取post数据是个难题，网上找资料也不好使，只能自己研究，通过研究发现，WEBAPI给了我们获取POST数据的可能，下面介绍一下：

//将POST数据以字符串的形式读取，例如post的json数据，就可以以这种方式读取 
actionContext.Request.Content.ReadAsStringAsync();

---

//将POST数据以内容流的形式读取 
actionContext.Request.Content.ReadAsStreamAsync();

---

//将POST数据以FORM键值对的形式读取，但是提交的数据须得是FORM提交的才可以 
actionContext.Request.Content.ReadAsFormDataAsync();

代码具体如下：

 using System;
 using System.Collections.Generic;
 using System.Linq;
 using System.Net.Http;
 using System.Web;
 using System.Web.Http;
 using System.Web.Http.Controllers;
 using BoxSecurity;

 namespace BoxWebApiFilter
 {
     [AttributeUsage(AttributeTargets.Interface | AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = false, Inherited = true)]
     public class ApiAuthorizeFilter : AuthorizeAttribute
     {
         private static List<string> PublicCmds = new List<string>()
         {
             "XXXX"
         };
         protected override bool IsAuthorized(HttpActionContext actionContext)
         {
             // 验证token
             //var token = actionContext.Request.Headers.Authorization;
             var ts = actionContext.Request.Headers.Where(c => c.Key.ToLower() == "tokenxxx").FirstOrDefault().Value;
             var requestContent = actionContext.Request.Content.ReadAsStringAsync();//读取post提交的json数据
             requestContent.Wait();//等待异步读取结束
             var inputJson = requestContent.Result;
             //此接口无需token验证
             BoxCommand.CmdRequest request =
                 Newtonsoft.Json.JsonConvert.DeserializeObject<BoxCommand.CmdRequest>(inputJson);
             if (PublicCmds.Contains(request.Cmd))
             {
                 return true;
             }

             if (ts != null && ts.Count() > )
             {
                 var token = ts.First<string>();
                 // 验证token
                 return TokenHelper.IsExistToken(token);
             }

             if (actionContext.Request.Method == HttpMethod.Options)
                 return true;
             return false;

         }
     }
 }