Asp.net核心WEB API安全的第三方中间件路线？(Asp.net core WEB API secure 3rd party middleware routes?)

 寻找如何解决这个问题的建议： 
 
 我有一个通过JWT身份验证和用户角色授权进行保护的asp.net core 2 webapi项目。 
 
 我在我的asp.net webapi中添加了第三方中间件，该中间件公开了度量标准端点。 
 
 我可以在度量中间件中设置端点路由和端口，但没有授权选项。 
 
 我希望确保这些端点与我自己的API端点相同，以便只有某个角色才能访问它们，但不确定如何解决这个问题，也许某些其他自定义中间件会降低链路，从而找到这些路由并检查JWT ？ 

Looking for suggestions of how to go about this:
 
I have an asp.net core 2 webapi project secured with JWT authentication and user role authorization.
 
I added a 3rd party middleware in my asp.net webapi that exposes metrics endpoints.
 
I can set the endpoint route and port in the metrics middleware but there is no option for authorization.
 
I would like to secure those endpoints the same as my own API endpoints so only a certain role can access them, but not sure how to go about this, perhaps some other custom middleware lower down the chain that spots those routes and checks for the JWT?

原文：https://stackoverflow.com/questions/50138784