leastprivilege.com
Authorization in ASP.NET Web API
So far I have mostly focused on authentication in Web API. At the end of the day you go through all those hoops just to be able to authorize the user after you know who he is. I am currently toying…