leastprivilege.com
Session Token Support for ASP.NET Web API
Disclaimer: This is an experimental feature I added to Thinktecture.IdentityModel.45 (and will soon be back-ported to 4.0) to gather some feedback. It is completely turned off by default. The idea …