RestAuthorizeAttribute.cs

public class RestAuthorizeAttribute : AuthorizeAttribute
{
    private const string SecurityToken = "token"; // Name of the header
    private readonly IAuthApiService _authApiService = new AuthApiService();

    public override void OnAuthorization(AuthorizationContext filterContext)
    {
        if (Authorize(filterContext))
        {
            return;
        }

        HandleUnauthorizedRequest(filterContext);
    }

    protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
    {
        //base.HandleUnauthorizedRequest(filterContext);
        var unauthorizedResult = new JsonResult();
        var resultJson = new ApiModel(Global.ErrorGetToken, 401, Global.UnAuthorized, null);
        unauthorizedResult.Data = resultJson;
        unauthorizedResult.JsonRequestBehavior = JsonRequestBehavior.AllowGet;
        filterContext.Result = unauthorizedResult;
    }

    private bool Authorize(AuthorizationContext actionContext)
    {
        try
        {
            HttpRequestBase request = actionContext.RequestContext.HttpContext.Request;
            string token = request.Headers[SecurityToken];

            return _authApiService.ValidateToken(token);
        }
        catch (Exception)
        {
            return false;
        }
    }
}

Hello, what is AuthApiService?