Auth service using Web Api, membership provider, and SQL Server 2012

Question

I am looking to write an auth service using Web Api, and SQL Server for authenticating and authorizing users on my .net site, but ios and Android apps as well. I'm speculating that basic authentication over SSL is the easiest way to go, but I'm pretty new to this whole section of .net. I'm having trouble finding some clear tutorials that explain how to write such a service. Can anyone point me to some resources on how to do this? I'd appreciate it.

Answer 1

I think you need to look OAuth implementation in .NET.

Here is a video to give you some background on Web API security.

I also suggest getting a trial subscription to Pluralsight training and check out the courses on Web API security.

You may want to target the latest release of Web API 2.0 from Microsoft, it has the most features you'll need.

Answer 2

I think this might be useful for you:

http://www.asp.net/web-api/overview/security/authentication-and-authorization-in-aspnet-web-api