ASP.NET Web API Authentication (Web + Mobile)

Question

I'm designing a solution that involves ASP.NET Web API as the service layer plus clients for web, iOS and Android.

Web users should be able to log into the web site and do their stuff. I'm using Forms Authentication for this scenario.

Mobile users should use the REST API and I believe we need a different authentication mechanism here.

Assuming that a given ASP.NET MVC application can support only 1 authentication mode, do I need to create 2 separate applications, one as the web client with Forms Authentication, and one as the API, and host them separately?

Any advice would be appreciated.

leastprivilege · Accepted Answer · 2013-09-29 09:52:03Z

1

You could do basic authentication for the service clients and combine that with your existing forms auth

http://leastprivilege.com/2012/10/23/mixing-mvc-forms-authentication-and-web-api-basic-authentication/

answered Sep 29, 2013 at 9:52

leastprivilege

18.5k1 gold badge37 silver badges51 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

ASP.NET Web API Authentication (Web + Mobile)

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related