ASP.NET Web API 2 - decoupling resource and authorization Web APIs.
TL;DR I wrote a small AngularJS app that consumes a resource and authorization Web APIs written in ASP.NET Web API 2/Katana using token based authentication. The SPA uses interceptors and request transformers to determine the authentication status and handle the authentication dance. Get a hold of the sources here
I had been playing around with ASP.NET Web API 2, Katana and Token Based Authentication specially around the idea of having multiple resource Web APIs and one Web API to handle authentication/authorization.
Also as part of the exercise, we’d have a Angular SPA to consume this, a pure static SPA as this would allow me to play also a little deeper with AngularJS’s components as interceptors and request transformers, details about both can be read here. Along the road I found a few issues I did not think of so I decided to document the whole thing here. The intention is not to
Continue reading →