Why Authorize Attribute policy parameter are restricted to const "compile time" ?
because this restriction disallow to use string concatenation like the below example , There is any reason to restrict it.
[Authorize($"{Privilege1},{Privilege2}")]
[HttpPost()]
public async Task<IActionResult> Testpost()
{
return Ok();
}