Reputation: 87
There is an amazing feature in mvc 4 internet application template which can easily integrate with facebook twitter and google. But there is no such feature in web api template.
How can I easily integrate DotNetOpenAuth
with web api?
Is there a tutorial?
Upvotes: 5
Views: 3852
Reputation: 81781
MVC is a browser-facing web site. WebAPI is for programmatic access by some client other than a browser web page (although it may be javascript running in the browser). So OpenID or OAuth login flows that require browser redirects don't make sense for WebAPI. Not directly anyway.
What does seem to apply is that you want your WebAPI to be authorized, and to know what user they represent. The common case then is for WebAPI to act as an OAuth 2 resource server, accepting access tokens that were issued by an authorization server that does accept Facebook, Twitter and Google to log in users before minting these access tokens.
There are several WebAPI samples that do this. Here's one.
Upvotes: 7