Web API in MVC project (Authentication)

Question

I have ASP.NET MVC project and using Form Authentication (Cookie base) with ASP.NET Identity. I added WEB API controller into that project. Now What I want is for MVC project it should use Form Authentication using Cookie but for API it should use token base, How I can configure it.

Regards, Imran Ahmad

gmuraleekrishna · Accepted Answer · 2016-03-29 09:10:16Z

2

Firstly install these NuGet packages,

1.Install-Package Microsoft.AspNet.WebApi.Owin

2.Install-Package Microsoft.Owin.Host.SystemWeb

3.Install-Package Microsoft.Owin.Security.OAuth

then, the project must be having a StartUp.cs file.
Add this code to your file

    OAuthAuthorizationServerOptions OAuthOptions = new OAuthAuthorizationServerOptions()
    {
        AllowInsecureHttp = true,
        TokenEndpointPath = new PathString("/api/token"),
        AccessTokenExpireTimeSpan = TimeSpan.FromDays(2),                
        Provider = new AuthorizationServerProvider()
    };

    // To Generate token
    app.UseOAuthAuthorizationServer(OAuthOptions);
    app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions());

Add this code to new AuthorizationServerProvider.cs file

public class AuthorizationServerProvider: OAuthAuthorizationServerProvider
{
     public override async Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
     {
         context.Validated();
     }

     public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
     {
         var identity = new ClaimsIdentity(context.Options.AuthenticationType);
         context.Validated(identity);
     }
}

You can test the code using Postman API client by posting to your endpoint

yourwebsite/api/token

along with grant_type, username and password in the
x-www-form-Urlencoded tab of the postman.

The response of which you will get an access_token, put this access token put it in your header while calling your Resource controller.

For further references refer http://bitoftech.net/2014/06/01/token-based-authentication-asp-net-web-api-2-owin-asp-net-identity/.

edited Mar 29, 2016 at 9:10

gmuraleekrishna

3,4311 gold badge29 silver badges46 bronze badges

answered Mar 29, 2016 at 9:01

Vivek Singh

1,11310 silver badges20 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Imran Ahmad Mughal Over a year ago

I think is for token base authentication, but I want that both authentication e.g Form Authentication using Cookie and Token base authentication should exist. What about the Form Authentication in that case?

Vivek Singh Over a year ago

ok, you mean to say you want to call API controller using either a cookie or using token authentication.

Vivek Singh Over a year ago

if you are planning to use both the authentication then the MVC cookie will work with the API controller just you have to decorate API controller with Authorize attribute. Add this in Startup.cs - app.UseCookieAuthentication(new CookieAuthenticationOptions());

Collectives™ on Stack Overflow

Web API in MVC project (Authentication)

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related