ServiceStack API服务RequiresAnyRole始终返回403错误

ServiceStack API服务RequiresAnyRole始终返回403错误,api,authentication,authorization,servicestack,Api,Authentication,Authorization,servicestack,我看过几个ServiceStack的身份验证/授权代码示例，但我似乎无法解决这个问题 我已经创建了一个自定义的AuthFeature，它来自BasicAuthProvider，并在我的AppHost上的插件中注册了它。在我的自定义提供者中，我覆盖了tryaauthenticate和OnAuthenticated，并且在我的服务中，我用[Authenticate]和[RequiresAnyRole（“Test”）]的属性修饰了类。在我的用例中，我在Auth头中传递用户名和密码，点击我的服务，它调用

AuthFeature

BasicAuthProvider

tryaauthenticate

OnAuthenticated

[Authenticate]

[RequiresAnyRole（“Test”）]

TryAuthenticate

OnAuthenticated

403无效角色

RequiresAnyRole

RequiredRole

RequiredPermission

public class AdAuthProvider : BasicAuthProvider
{
    public override bool TryAuthenticate(IServiceBase authService, string userName, string password)
    {
        var authenticated = false;
        UserPrincipal userPrincipal = UserPrincipal.FindByIdentity(new PrincipalContext(ContextType.Domain), userName);
        var adRealm = System.Configuration.ConfigurationManager.AppSettings["ADRealm"];
        if (userPrincipal != null)
        {
            using (var pc = new PrincipalContext(ContextType.Domain, adRealm))
            {
                authenticated = pc.ValidateCredentials(userName, password);
            }                
        }
        return authenticated;
    }


    public override IHttpResult OnAuthenticated(IServiceBase authService, IAuthSession session, IAuthTokens tokens, Dictionary<string, string> authInfo)
    {

        session.Roles = new List<string>();                
        session.Roles.Add("Test");         

        authService.SaveSession(session, new System.TimeSpan(0, 30, 0));
        return null;

    }

AuthRepository

AssignRole

assignrole

authRepo

var authRepo = HostContext.AppHost.GetAuthRepository(base.Request);
using (authRepo as IDisposable)
{
    var userAuth = authRepo.GetUserAuthByUserName(request.UserName);
    if (userAuth == null)
        throw HttpError.NotFound(request.UserName);

    authRepo.AssignRoles(userAuth, request.Roles, request.Permissions);

var authRepo = HostContext.AppHost.GetAuthRepository(base.Request);
using (authRepo as IDisposable)
{
    var userAuth = authRepo.GetUserAuthByUserName(request.UserName);
    if (userAuth == null)
        throw HttpError.NotFound(request.UserName);

    authRepo.AssignRoles(userAuth, request.Roles, request.Permissions);