c# - WebAPI Token Issuance Authorization -


i using sessions , overriding authorizeattribute manage authorization webapi endpoint, used mvc web application. i've been told issuing tokens best way manage users , roles. i'm trying understand is:

  1. why better using session?
  2. can provide (simple) example of how issue tokens, when user logs in using webapi endpoint, , how use/track token after has been issued.

i've been researching owin , bunch of other stuff , i'm having difficult time finding example of how works.

  1. tokens more secure , built asp.net identity framework. no need roll own solution.
  2. look @ sections "get access token" , "send authenticated request" link: http://www.asp.net/web-api/overview/security/individual-accounts-in-web-api. endpoint setup in default mvc template. can use postman test.

Comments

Popular posts from this blog

mysql - FireDac error 314 - but DLLs are in program directory -

git - How to list all releases of public repository with GitHub API V3 -

c++ - Getting C2512 "no default constructor" for `ClassA` error on the first parentheses of constructor for `ClassB`? -