protected override Task OnHandleRequestAsync(HttpRequestMessage request) { if (request.Headers.Authorization != null) { return(Task.CompletedTask); } _configuration.TryGet(SecurityTokenConstants.LoginToken, out LoginToken token); return(ValidateToken(token) ? Task.CompletedTask : OnHandleRequestAsync(request, token)); }