title: ASP.NET Web API Authorization Filter
body: <p>I have a global authorization filter with overridden <code>OnAuthorization</code> method.</p>
  
  <p>On debugging, I see that the controller class is instantiated first and then the <code>OnAuthorization</code> method is invoked.</p>
  
  <p>Is this a known behavior as I have some code in the controller constructor which need not run if not authorized. </p>
  
  <p>Is there any way to work around this?</p>