asp.net core的受權過濾器中獲取action上的Attribute

var action = context.ActionDescriptor as ControllerActionDescriptor;
var permission = action.MethodInfo.GetCustomAttribute<PermissionAttribute>();

大概就是這樣。