Web api open oauth(DotNetOpenAuth) mvc 4

问题:

There is an amazing feature in mvc 4 internet application template which can easily integrate with facebook twitter and google. But there is no such feature in web api template. How can I easily integrate DotNetOpenAuth with web api? Is there a tutorial?

回答1:

MVC is a browser-facing web site. WebAPI is for programmatic access by some client other than a browser web page (although it may be javascript running in the browser). So OpenID or OAuth login flows that require browser redirects don't make sense for WebAPI. Not directly anyway.

What does seem to apply is that you want your WebAPI to be authorized, and to know what user they represent. The common case then is for WebAPI to act as an OAuth 2 resource server, accepting access tokens that were issued by an authorization server that does accept Facebook, Twitter and Google to log in users before minting these access tokens.

There are several WebAPI samples that do this. Here's one.