Hi everybody
Me and my team are developing a solution in where is required to have an MVC site and a Web API sites in different applications. But we are facing a problem about the best way to integrate the security and the authentication.
The idea is to have the API with all the business rules on it so other, third-party apps can consume it. Including the MVC site. But haven't found the best approach to implement a common security layer.
We have several ideas in mind:
Creating a common IdentityDbContext Handle all the authentication with tokens in the API and find a way to store it by user.
Using a middleware like Azure Authentication or similar.
Is there a proper pattern for that? I hope you can help me
Go to the complete details ...