Pro ASP.NET Web API Security

With such wide accessibility, securing your code effectively needs to be a top priority. You will quickly find that the WCF security protocols you're familiar with from . NET are less suitable than they once were in this new environment, proving themselves cumbersome and limited in terms of the standards they can work with.

Fortunately, ASP. NET Web API provides a simple, robust security solution of its own that fits neatly within the ASP. NET MVC programming model and secures your code without the need for SOAP, meaning that there is no limit to the range of devices that it can work with - if it can understand HTTP, then it can be secured by Web API. These SOAP-less security techniques are the focus of this book.

1. Welcome to ASP.NET Web API
2. Building RESTful Services
3. Extensibility Points
4. HTTP Anatomy and Security
5. Identity Management
6. Encryption and Signing
7. Custom STS through WIF
8. Knowledge Factors
9. Ownership Factors
10. Web Tokens
11. OAuth 2.0 Using Live Connect API
12. OAuth 2.0 From the Ground Up 
13. OAuth 2.0 Using DotNetOpenAuth
14. Two-Factor Authentication
15. Security Vulnerabilities
16. Appendix: ASP.NET Web API Security Distilled