自定义授权属性在WebAPI中不起作用

 public class CustomAuthorizeAttribute : AuthorizationFilterAttribute
 {  
    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
       return true;// if my current user is authorised
    }
 }
 public class CustomAuthorizeAttribute : Author