I am developing a MVC 5 site that is dependant on Google for authentication. I understand that the bearer token approach is used by ASP.NET for this purpose. My question is
How (what mechanism) does the framework (ASP.NET) use to validate that the bearer token is valid and not just some randomly generated characters?
Go to the complete details ...