Which AuthorizationFilterAttribute method should I override?

Question

I would like to create my custom authorization filter. I see that in System.Web.Http.AuthorizeAttribute there are two similar methods IsAuthorized and OnAuthorization. Which one should I override and why?

Answer 1

You should override IsAuthorized, which "Determines whether access for this particular request is authorized."