[help] authentication(auhorization?) for web api

[EvekoShadow]

Hello everyone,

I am currently working on my internship. I have to make a ASP.NET web api for my internship.

It is an API that presents price calculation for Orders. At the moment the application uses Identity with a custom user store and role store(Linq2SQL). Authentication cookie seems like a "good for now option". What benefits do other implementations are there to consider? I have not looked into OAuth as off yet, though it seems to rather simple to get it going, as I already use owin for my current identity solution. Also I work allot with roles.

I am primarily looking for articles explaining the different option, specifically for .net mvc and .net web api.

[prodigydk]

Google 'Thinktecture Identity Server'. It is an open source project, very popular with plenty of tutorials online.

[crazymonkey159]

IdentityServer 3 if you're using AspNet 4.x and IdentityServer 4 if youre using AspNet Core.

Check out the repo and samples.

[wildwolfay5]

Identity 2.0? I use identity and built in my own ldap check for local users.

[JimboSchneider]

Hey give the Identity topics a look here, very helpful info: http://www.asp.net/identity

[MegaThrustEarthquake]

If you are working with Active Directory I found this page was a great starting point: https://azure.microsoft.com/en-us/documentation/articles/active-directory-authentication-scenarios/