c# - WebAPI Token Issuance Authorization -
i using sessions , overriding authorizeattribute manage authorization webapi endpoint, used mvc web application. i've been told issuing tokens best way manage users , roles. i'm trying understand is:
- why better using session?
- can provide (simple) example of how issue tokens, when user logs in using webapi endpoint, , how use/track token after has been issued.
i've been researching owin , bunch of other stuff , i'm having difficult time finding example of how works.
- tokens more secure , built asp.net identity framework. no need roll own solution.
- look @ sections "get access token" , "send authenticated request" link: http://www.asp.net/web-api/overview/security/individual-accounts-in-web-api. endpoint setup in default mvc template. can use postman test.
Comments
Post a Comment