Security
The system implements HTTP services by employing ASP.NET WebAPI that can be consumed by a broad range of clients including browsers and handheld devices(smartphones and tablets).
It supports variety of GET, PUT and POST request-response message system and provides the result in JSON or XML format.
With WebAPI content negotiation, the system returns data based on the client requests. If the client is requesting the data to be returned as JSON or XML, the WebAPI framework deals with the request type and returns the data appropriately based on the media type. By default, WebAPI provides JSON based response.
WebAPI is a trending technology. As we are exposing our WebAPI to the outside world, we should maintain security in WebAPI. It means a valid user can only access WebAPI, or else it will throw an unauthorization error.
Authentication
One of our primary concerns will be security and integrity of data and/or requests,
For more details proceed to Authentication and Authorization.