Authorization Filters act at the beginning of the request life cycle, before all other filters are executed. It determines if the request is authorized to access the resource or not.
To create an Authorization Filter, one can simply implement the IAuthorizationFilter interface and provide an implementation of the method:
interface IAuthorizationFilter {
OnAuthorization(AuthorizationFilterContext ctx);
}