Summary
Hurray! We just secured our Web API using the token-based authentication.
In this chapter, you learned about hosting OWIN in IIS and adding Web API to the OWIN pipeline. You also learned and understood the flow of Local Login Authentication.
We did a walkthrough of how to send an unauthorized request and understood its impact.
Then, we sent the username and password to get an access token for further access of the resources that require an authenticated request.
Finally, you saw how to send the bearer token in the Authorization header of the request and access the protected resources.
In the next chapter, let's secure Web API by enabling the basic authentication using authentication filters.
Let's step up our security to the next level!
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access