title: How can I validate a custom token (which is not JWT) in ASP .NET Core 2.0 Web API?
body: <p>In our ASP .NET Core 2.0, Web API, when the user logs in, we generate a GUID and return that to the user after storing it in database. What is the best practice to validate this token when the user submits a request to a controller having Authorize attribute on it. </p>
  
  <p>Should I override AuthorizeAttribute.OnAuthorization and put my custom logic in there ? or is there any other place where I should place my custom logic ? </p>
  
  <p>Thanks in advance. </p>