asp.net webapi使用过滤器/filter实现用户禁用接单

/// <summary>
    /// 锁定师傅接单的检查
    /// </summary>
    public class LockOrderServiceAttribute: ActionFilterAttribute
    {
        public override void OnActionExecuting(HttpActionContext actionContext)
        {
            IEnumerable<string> tokenlist;
            if (actionContext.Request.Headers.TryGetValues("x-token", out tokenlist))
            {
                string token = tokenlist.FirstOrDefault();
                var token_obj = CacheHelper.Get(token);
                var userinfo = JsonConvert.DeserializeObject<Base_UsersDTO>(token_obj.ToString());

                var user_LockBLL = new User_LockBLL();
                var lockInfo = user_LockBLL.IsLock(userinfo.UserType.ToEnum<SettleAccountType>(), userinfo.UserID, LockEvent.OrderService);
                if (lockInfo.Status == true)
                {
                    actionContext.Response = new HttpResponseMessage
                    {
                        Content = new StringContent(JsonConvert.SerializeObject(new
                        {
                            statusCode = 0,
                            message = "已被禁止接单服务",
                        }), System.Text.Encoding.GetEncoding("UTF-8"), "application/json"),
                        StatusCode = HttpStatusCode.OK
                    };
                }
            }
            else
            {
                actionContext.Response = new HttpResponseMessage
                {
                    Content = new StringContent(JsonConvert.SerializeObject(new
                    {
                        statusCode = HttpStatusCode.Unauthorized,
                        message = "请求未授权",
                    }), System.Text.Encoding.GetEncoding("UTF-8"), "application/json"),
                    StatusCode = HttpStatusCode.Unauthorized
                };
            }

        }
    }