Common Mistakes?
Mistake Fix
Doing authentication inside action filters Use authorization filters
Performing heavy logic Move to middleware
Not registering filters as services Use DI for maintainability
Returning inconsistent error messages Handle errors via global exception filter