I have a web app which uses OAuth2 Implicit flow for security. This works fine. Now I have a file export/download in a Web API service. I cannot use ajax to GET the file. I have to use a standard form. Due to this, I have to send the bearer token as a parameter.
How can I set up the OWIN Middleware to authorise this on the resource server? One idea is to create an extra OWIN Middleware which intecepts the request and adds the token to the header. I'm not certain if this is a good idea.
Would be greatful for any help or best practices.
greetings Damien
Go to the complete details ...