优化WebApi过滤外部访问机制

Author: JeffreySu

src/Senparc.CO2NET.WebApi/ActionFilters/ForbiddenExternalAccessAsyncFilter.cs

@@ -27,7 +27,7 @@ public ForbiddenExternalAccessAsyncFilter(bool forbiddenExternalAccess)
 
         public async Task OnActionExecutionAsync(ActionExecutingContext context, ActionExecutionDelegate next)
         {
-            if (!_forbiddenExternalAccess && context.HttpContext.Request.IsLocal())
+            if (_forbiddenExternalAccess && !context.HttpContext.Request.IsLocal())
             {
                 throw new ForbiddenExternalAccessException();
             }

src/Senparc.CO2NET.WebApi/Senparc.CO2NET.WebApi.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 	<PropertyGroup>
 		<TargetFrameworks>netcoreapp3.1;net5.0;net6.0</TargetFrameworks>
-		<Version>0.2.5.8-preview3</Version>
+		<Version>0.2.5.9-preview3</Version>
 		<LangVersion>latest</LangVersion>
 		<AssemblyName>Senparc.CO2NET.WebApi</AssemblyName>
 		<RootNamespace>Senparc.CO2NET.WebApi</RootNamespace>

src/Senparc.CO2NET.WebApi/WebApiEngines/WebApiEngine.cs

@@ -63,7 +63,7 @@ public partial class WebApiEngine
         /// <param name="showDetailApiLog"></param>
         /// <param name="copyCustomAttributes"></param>
         /// <param name="defaultAction">默认请求类型，如 Post，Get</param>
-        /// <param name="forbiddenExternalAccess">是否允许外部访问，默认为 false，只允许本机访问相关 API</param>
+        /// <param name="forbiddenExternalAccess">是否允许外部访问，默认为 false，只允许本机访问自动生成的 WebApi</param>
         public WebApiEngine(string docXmlPath, ApiRequestMethod defaultRequestMethod = ApiRequestMethod.Post, Type baseApiControllerType = null, bool copyCustomAttributes = true, int taskCount = 4, bool showDetailApiLog = false, bool forbiddenExternalAccess = true)
         {
             _docXmlPath = docXmlPath;