Authentication with oAuth and ASP.NET MVC + WebApi

Question

We are planning to start developing our new site with ASP.Net, MVC and AngularJS. I will also have a WebApi that i would like to use oAuth authentication with, because it is easy to to pass in token, plus may want to allow users to login with Google, Facebook etc in the future.

Questions

If i want to use oAuth on my WebApi (which is a separate application), what authentication method should i be using for my asp.net MVC website? oAuth? Forms? Both? And how do you implement this? On my API i wrote a simple oAuth provider that asks for a username and password and returns a token string.
Should my WebApi have a single sign on login page to interact with the website? Or should the login page be on the website? Should the login page use client side calls or server side calls?
What is actually within the oAuth token and how does it link to my website? Do I have to do something on the server once they login via Facebook/Google? Can I use this token on my server to determine which user is logged in?
Our website has many databases, all the same, but depending which user is logging in, depends on which database they can view data from. Is this easy to cope with using standard method/objects in ASP.Net MVC? Or is this going to force me in writing my own code?

Any advice would be appreciated as well!

I'm not sure this helps but I used oAuth with MVC and azure mobile services for Silicon Valley Code Camp and it went pretty well.slideshare.net/peterkellner99/oauth-36039477 meetup.com/BayNET/events/185540132 — Peter Kellner
– Peter Kellner, Commented Oct 24, 2014 at 6:15

Diego Martelli · Accepted Answer · 2014-12-05 10:54:24Z

1

If are you planning to use MVC 5 You could use Asp.Net Identity. Take a look here: http://www.asp.net/mvc/overview/security/create-an-aspnet-mvc-5-app-with-facebook-and-google-oauth2-and-openid-sign-on

I hope this could help you. Diego

answered Dec 5, 2014 at 10:54

Diego Martelli

3021 silver badge10 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

softawareblog.com · Accepted Answer · 2015-02-10 12:18:30Z

1

Your best bet :

This topic shows how to secure a web API using OAuth2 to authenticate against a membership database for both local and social login

http://www.asp.net/web-api/overview/security/individual-accounts-in-web-api

edited Feb 10, 2015 at 12:18

answered Feb 10, 2015 at 11:35

softawareblog.com

9909 silver badges21 bronze badges

Collectives™ on Stack Overflow

Authentication with oAuth and ASP.NET MVC + WebApi

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related