asp .net mvc web api authentication filters session

Question

public class BodyPhoto
{
    [Key]
    public int PhotoID { get; set; }

    public int UserID { get; set; }
    public virtual User User { get; set; }
    public DateTime Date { get; set; }
    public string PhotoSource { get; set; }

    public string MuscleGroup { get; set; }
}

I want to have a web api for this. User login to the website, and has unique UserID. User does a post with BodyPhoto. How can i make sure i save BodyPhoto with correct UserID.

I am confused how to implement this with asp.net web api. Maybe with sessions and authentication filters.

You would initiate a post to the Web API from a page where you would typically have a hidden form control that contains the user ID. You would post that value with your other data so that it would be model bound and the Web API could access it. — Mister Epic
– Mister Epic, Commented Oct 17, 2013 at 12:53
yes but how do i make sure client can't change the hidden value — user1972450
– user1972450, Commented Oct 17, 2013 at 16:09

Van · Accepted Answer · 2013-10-17 12:38:52Z

1

similar to MVC, you can use the AuthorizeFilterAttribute to authenticate and authorise your api requests.

http://www.asp.net/web-api/overview/security/authentication-and-authorization-in-aspnet-web-api

Extend that attribute if you wish to implement your own membership/role provider.

answered Oct 17, 2013 at 12:38

Van

1,3871 gold badge10 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

user1972450 Over a year ago

Can you be more specific, i still don't understand how authentication works.

Jacques Snyman Over a year ago

Have you done any reading whatsoever on Membership Providers?

Collectives™ on Stack Overflow

asp .net mvc web api authentication filters session

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related