Tagged Questions

0
votes
1answer
39 views

Where the auth cookies needs to be when you have a web api?

I have a Web Api (C# MVC4 with EF5) and want to provide data information for other applications. I'll use a type of anti relay attack sending a uniquekey as response for every request and expecting ...
0
votes
2answers
264 views

Basic authentication in web api

I started working on Web Api and just want to create a simple basic authentication. I want to know how to do that? I tried with the given MSDN link but no step wise tutorial is given on MSDN. ...
0
votes
2answers
25 views

Claims authorization for specific resources

I am writing an example file storage system (example just for stackoverflow). My current domain models look as such: public class User { public int ID { get; set; } public string ...
0
votes
1answer
790 views

How to build a WebAPI for remote authentication?

We are thinking about revising our existing membership provider into web service to allow remote authentication. Say, a windows 8 application will be able to accept login credentials and check it in ...
0
votes
1answer
23 views

WebApi - CurrentUserId isn't accessible until after Registration?

I have the following: public HttpResponseMessage Register(RegisterModel model) { if (ModelState.IsValid) { // Attempt to register the user ...
1
vote
1answer
171 views

Aspnet Web API Authentication on mobile clients

I am implementing an API using ASP.net Web API and I'm trying to find proper alternatives for authentication in my scenario, it is as follows: The API should be accessible from mobile clients The ...
1
vote
2answers
84 views

How to secure WebAPI application / HTML+JS clients?

I've spent the past week on SO and in books reading about authentication and started to roll out Basic Authentication for my WebAPI so that HTML clients can let users login/register/logout, but Basic ...
0
votes
1answer
58 views

SimpleMembershipProvider vs WebSecurity

I have a WebAPI project with a Repository layer. For methods related to accounts, I'm not sure which method to use here: public class RepositoryService : IRepositoryService { private ...
1
vote
1answer
63 views

Any examples of a MessageHandler for WebAPI Forms Authentication?

As a follow-up to this question: WebAPI + Forms Authentication + SimpleMembershipProvider using WindowsIdentity when it shouldn't I'm now trying to implement a message handler that sets the ...
5
votes
1answer
287 views

WebAPI + Forms Authentication + SimpleMembershipProvider using WindowsIdentity when it shouldn't

What I've Done I'm building a REST-ish WebAPI application. I'm trying to implement forms authentication here, so clients can allow users to login/register/logout from their browsers. I'm using ...
0
votes
1answer
59 views

Configuring WebAPI for Forms Authentication

I'm working with webApi and trying to implement forms auth. My application is using simpleMembership. For some reason my controllers are reverting to my windows credentials to check and see if a ...
2
votes
1answer
83 views

Best authentication way for .NET Web API + Static HTML + JS

I'm developing a web application consuming a REST .NET Web API. My web API is stateless and I'm using static HTML and JQuery requests. Question.... What's the best way to do the login/password ...
1
vote
1answer
41 views

Logging users out with basic authentication?

I've searched around and there doesn't seem to be a non-hacky way to clear the user credentials from the browser using basic authentication. I'm building a WebAPI with an HTML client that accepts ...
0
votes
2answers
36 views

Basic Authentication + SSL - what do do with the credentials once they're on the server?

Say a user submits their credentials using basic authentication. I have a custom message handler that retrieves the credentials from the header: protected async override ...
0
votes
1answer
118 views

Web API in SPA template returning status 401 Unauthorized when passing username and password

When testing the WebAPI authentication in the SPA template, I can create a user, sign in, and retrieve sample to-do's using this url from Google Chrome: http://myhost.com:49688/api/TodoList When I ...

1 2 3 4 5
15 30 50 per page