https://www.cnblogs.com/KimmyLee/p/6430474.htmlhttps://www.cnblogs.com/rocketRobin/p/9077523.htmlhttp://bitoftech.net/2015/03/31/asp-net-web-api-claims-authoriz...