From docs:
You can register a filter globally (for all controllers and actions)
by adding it to theMvcOptions.Filterscollection in the
ConfigureServicesmethod in theStartupclass:
You can not add AuthorizeAttribute into MvcOptions.Filters . Create an AuthorizationPolicy and use AuthorizeFilter:
var policy = new AuthorizationPolicyBuilder()
.RequireAuthenticatedUser()
.RequireRole("Admin", "SuperUser")
.Build();
services.AddMvc(options =>
{
options.Filters.Add(new AuthorizeFilter(policy));
});