Thinktecture.IdentityModel and ASP.NET Web API

As part of my work with the new Thinktecture.IdentityModel and JWT, I also updated the ASP.NET Web API integration. My first drop was based on this article. But had some limitation.

The next version is easier to use and much more flexible. It come out-of-the-box with support for:

  • Basic Authentication
  • Simple Web Tokens
  • JSON Web Tokens
  • Access Keys
  • SAML 1.1 & 2.0

The first version only supported the authorization header, now I am able to retrieve credentials from various locations like:

  • the authorization header (scheme / credential)
  • some other header
  • query string parameter
  • client certificate
  • cookie