c# - WebAPI Token Issuance Authorization -


i using sessions , overriding authorizeattribute manage authorization webapi endpoint, used mvc web application. i've been told issuing tokens best way manage users , roles. i'm trying understand is:

  1. why better using session?
  2. can provide (simple) example of how issue tokens, when user logs in using webapi endpoint, , how use/track token after has been issued.

i've been researching owin , bunch of other stuff , i'm having difficult time finding example of how works.

  1. tokens more secure , built asp.net identity framework. no need roll own solution.
  2. look @ sections "get access token" , "send authenticated request" link: http://www.asp.net/web-api/overview/security/individual-accounts-in-web-api. endpoint setup in default mvc template. can use postman test.

Comments

Popular posts from this blog

html - Firefox flex bug applied to buttons? -

html - Missing border-right in select on Firefox -

python - build a suggestions list using fuzzywuzzy -