ASP.NET Web API Security Essentials

Individual User Account authentication flow

Individual User login in Web API uses OAuth2 to authenticate the requests using the resource owner password flow. Resource owner password flow is a grand type that is defined in OAuth2. This authentication flow enables the client to send username and password to authorization server. The basic flow of a local login is given in the following:

1. The end user provides username and password on client screen.
2. The client sends the username and password to the server that returns an access token.
3. The server verifies the username and password received and returns an access token.
4. The client accesses protected resources by sending the access token along with an HTTP request in the Authorization header.

The following ...