ASP.NET MVC RESTful authentication API

Question

How would I go about handling authentication in a RESTful way that will work with desktop/mobile apps? For eg. I know how to build authentication in my apps by using FormsAuthentication, which relies on cookies, which I assume only works with browsers.

Do I still use FormsAuthentication? My login method takes passwords and usernames, and I plan to use other 3rd party logins such as google, twitter and facebook.

So for the password and username, the client sends that to the server, how do I set it up so an android or windows phone 7 app can authenticate with it.

I'm also exposing some actions with the [Authorize] attribute.

silverfighter · Accepted Answer · 2011-07-11 07:49:23Z

2

Dominik Bayer did a great talk at NDC 2011 about securing rest services. He discusses pros and cons of multiple ways. A good point to start from...

You have to seperate Authentication and Authorization.

If you go with multiple Login-Provider (google, facebook, twitter) then Oauth would be the choice...

But more details here:

Securing REST-Services and Web-APIs:

http://ndc2011.macsimum.no/SAL1/Torsdag/1740-1840.wmv

answered Jul 11, 2011 at 7:49

silverfighter

6,89212 gold badges52 silver badges76 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

ASP.NET MVC RESTful authentication API

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related